Check Point Certified Security Administrator (CCSA) R80 — Question 130

What CLI utility allows an administrator to capture traffic along the firewall inspection chain?

Answer options

• A. show interface (interface) ג€"chain
• B. tcpdump
• C. tcpdump /snoop
• D. fw monitor

Correct answer: D

Explanation

The correct answer is D, 'fw monitor', which is specifically designed to monitor and capture traffic in the firewall's inspection chain. Option A is not a valid command for this purpose, while options B and C, although useful for capturing network traffic, do not specifically target the firewall inspection chain.