What cli command is run on the GW to verify communication to the Identity Collector?

Question

Options

• Afwd connected
• Bpdp connections idc
• Cpep connections idc
• Dshow idc connections

• A
  2% (1)
• B
  88% (45)
• C
  4% (2)
• D
  6% (3)

Explanation

pdp connections idc is correct because on a Check Point Gateway, the PDP (Policy Decision Point) is the component responsible for identity-based policy decisions, and this command specifically queries its connection status with the Identity Collector (IDC). Option A (fwd connected) is a distractor - fwd relates to the firewall daemon's general connectivity, not IDC communication. Option C (pep connections idc) is plausible but wrong: PEP (Policy Enforcement Point) enforces decisions rather than managing identity source connections, and this is not a valid IDC verification command. Option D (show idc connections) uses Cisco-style syntax and is not a valid Check Point CLI command.

Memory tip: Think PDP = "Who are you?" (identity decisions) and PEP = "What can you do?" (enforcement). Since IDC feeds identity data, you query the PDP - pdp connections idc.

No community discussion yet for this question.