Check Point Certified Security Expert (CCSE) R80 — Question 190

What is the correct command to observe the Sync traffic in a VRRP environment?

Answer options

Correct answer: D

Explanation

The correct command is D, as it specifically captures traffic destined for the multicast address 224.0.0.18, which is used by VRRP for synchronization. Option A is incorrect because it references a different type of filtering. Option B does not target the correct multicast address, and option C is not specific enough as it uses a general protocol filter rather than focusing on the multicast address for VRRP.