nerdexam
Check_Point

156-215.80 · Question #294

Which command can you use to verify the number of active concurrent connections?

The correct answer is B. fw ctl pst pstat. The fw ctl pstat command displays Check Point kernel statistics including the number of active concurrent connections.

Security Gateway Troubleshooting

Question

Which command can you use to verify the number of active concurrent connections?

Options

  • Afw conn all
  • Bfw ctl pst pstat
  • Cshow all connections
  • Dshow connections

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    92% (47)
  • C
    2% (1)
  • D
    4% (2)

Why each option

The fw ctl pstat command displays Check Point kernel statistics including the number of active concurrent connections.

Afw conn all

fw conn all is not a valid Check Point CLI command and will not execute successfully on a gateway.

Bfw ctl pst pstatCorrect

fw ctl pstat is a Check Point kernel-level command that outputs real-time performance statistics from the firewall kernel, including the current count of active concurrent connections. It reads directly from kernel memory structures, making it the authoritative source for connection table state. This command is the standard tool used by Check Point administrators and support for diagnosing connection capacity issues.

Cshow all connections

show all connections is not a recognized Check Point command syntax and does not exist in the standard CLI.

Dshow connections

show connections is a valid command in some contexts but does not provide an aggregate count of concurrent active connections the way fw ctl pstat does.

Concept tested: Check Point CLI command for concurrent connection statistics

Source: https://support.checkpoint.com/results/sk/sk30042

Topics

#concurrent connections#fw ctl pstat#connection table#diagnostic commands

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice