Check Point Certified Automation Specialist (CCAS) — Question 61

You receive reports that Users cannot browse internet sites. You are using identity awareness with AD Query and Identity Collector in addition you have the Browser Based Authentication Enabled. What command can be used to debug the problem?

Answer options

• A. on the gateway: ad debug on
• B. on the gateway: ad query debug on
• C. on the management: ad query debug extended
• D. on the gateway: pdp debug nac extended

Correct answer: D

Explanation

The correct answer is D because 'pdp debug nac extended' specifically provides detailed debugging information related to Network Access Control (NAC), which is crucial for understanding identity awareness issues. The other options either do not apply to the context of NAC or do not provide the necessary level of detail for troubleshooting this particular scenario.