The correct answer is:
B. fw monitor -pi -vpn
The –pi means Pre-Inbound (in chain).
The -vpn means - (minus sign) specifies before the given module (vpn).
The correct answer is:
C. fw monitor -pi +vpn
In Check Point, the fw monitor tool captures packets as they pass through various inspection points in the kernel. The common inspection points are:
i – Pre-inbound (before Security Policy)
I – Post-inbound (after Policy, before forwarding)
o – Pre-outbound
O – Post-outbound
If you want to capture pre-inbound traffic before it enters the VPN module, you must:
Include "-pi" to capture pre-inbound
Include "+vpn" to capture before VPN decryption occurs
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.156-587 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
alumast
1 week, 4 days ago922f9b2
1 month agokeikei1228
1 month, 1 week ago