nerdexam
Check_Point

156-585 · Question #43

Which is the correct "fw monitor" syntax for creating a capture file for loading it into WireShark?

The correct answer is D. fw monitor -e "accept<FILTER EXPRESSION>;" -o Output.cap. See the full explanation below for the reasoning.

Question

Which is the correct "fw monitor" syntax for creating a capture file for loading it into WireShark?

Options

  • Afw monitor -e "accept<FILTER EXPRESSION>;" >> Output.cap
  • BThis cannot be accomplished as it is not supported with R80.10
  • Cfw monitor -e "accept<FILTER EXPRESSION>;" -file Output.cap
  • Dfw monitor -e "accept<FILTER EXPRESSION>;" -o Output.cap

How the community answered

(51 responses)
  • A
    12% (6)
  • B
    4% (2)
  • C
    8% (4)
  • D
    76% (39)

Community Discussion

No community discussion yet for this question.

Full 156-585 Practice