Check Point Certified Multi-Domain Security Management Specialist (CCMS) — Question 26

You receive reports from multiple users that they cannot browse. Upon further discovery you identify that Identity Awareness cannot identify the users properly and apply the configured Access Roles. What commands you can use to troubleshoot all identity collectors and identity providers from the command line?

Answer options

• A. on the gateway: pdp debug set IDC all IDP all
• B. on the gateway: pdp debug set AD all and IDC all
• C. on the management: pdp debug on IDC all
• D. on the management: pdp debug set all

Correct answer: A

Explanation

The correct answer is A because the command 'pdp debug set IDC all IDP all' on the gateway effectively enables debugging for all identity collectors and identity providers, which is essential for thorough troubleshooting. Options B, C, and D do not provide comprehensive debugging for both identity collectors and providers, making them less suitable for this scenario.