Check_Point

156-581 · Question #12

Which is the correct 'fw monitor syntax for creating a capture file for loading it into Wireshark?

The correct answer is D. fw monitor -e 'accept <FILTER EXPRESSION>; -o Output.cap. See the full explanation below for the reasoning.

Question

Which is the correct 'fw monitor syntax for creating a capture file for loading it into Wireshark?

Options

Afw monitor -e 'accept <FILTER EXPRESSION>; » Output.cap
BThis cannot be accomplished as it is not supported with R80.10
Cfw monitor -e 'accept <FILTER EXPRESSION>: -file Output.cap
Dfw monitor -e 'accept <FILTER EXPRESSION>; -o Output.cap

How the community answered

(40 responses)

A
3% (1)
B
10% (4)
C
15% (6)
D
73% (29)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full 156-581 Practice