Check Point Certified Cloud Specialist (CCCS) R82 — Question 31

What file extension should be used with fw monitor to allow the output file to be imported and read in WireShark?

Answer options

• A. .cap
• B. .exe
• C. .tgz
• D. .pcap

Correct answer: A

Explanation

The correct answer is A, .cap, as this is a file format that WireShark can read for packet capture data. Option B, .exe, is an executable file format and not suitable for packet captures. Option C, .tgz, is a compressed archive format, while option D, .pcap, is also a valid packet capture format but the question specifically asks for .cap.