Check Point Certified Cloud Specialist (CCCS) — Question 19

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

Answer options

• A. .pea
• B. .exe
• C. .cap
• D. .tgz

Correct answer: C

Explanation

The correct answer is C, .cap, because Wireshark is designed to read capture files with this extension. The other options, such as .pea, .exe, and .tgz, are not compatible with Wireshark for packet capture analysis.