Check_Point
156-581 · Question #10
Some users from your organization have been reporting some connection problems with CIFS since this morning. You suspect an IPS issue after an automatic IPS update last night. So you want to perform…
The correct answer is D. fw monitor -mI -pI 5 -e <filterexperession>. See the full explanation below for the reasoning.
Question
Some users from your organization have been reporting some connection problems with CIFS since this morning. You suspect an IPS issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS chain module (position 4 in the chain) to check if the packets pass the IPS. What command do you need to run?
Options
- Afw monitor -pi 5 -e <filterexpression>
- Bfw monitor -pI asm <filterexpression>
- Ctcpdump -eni any <fitterexpression>
- Dfw monitor -mI -pI 5 -e <filterexperession>
How the community answered
(64 responses)- A3% (2)
- B14% (9)
- C8% (5)
- D75% (48)
Community Discussion
No community discussion yet for this question.