156-315.80 · Question #259
Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Developer Team is having random…
The correct answer is A. Pamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She. See the full explanation below for the reasoning.
Question
Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Developer Team is having random access issue to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window. What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?
Options
- APamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She
- BPamela should check SecureXL status on DMZ Security Gateway and if it's turned OFF. She
- CPamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures
- DPamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures
How the community answered
(32 responses)- A81% (26)
- B3% (1)
- C6% (2)
- D9% (3)
Community Discussion
No community discussion yet for this question.