Check Point Certified Multi-Domain Security Management Specialist (CCMS) — Question 52

You want to fully investigate the VPN establishment, what will you do?

Answer options

• A. vpn debug and use IKEview
• B. debug FWD because VPND is child process
• C. use vpn tu command and use option 8 to start debug
• D. use kernel debug with fw ctl debug -m VPN all

Correct answer: A

Explanation

The correct answer is A because using 'vpn debug' along with 'IKEview' provides comprehensive insights into the VPN establishment process. Option B focuses on a specific process that may not offer a complete investigation, while option C uses a command that is less effective for full debugging. Option D involves kernel debugging, which is more complex and not specifically tailored for VPN troubleshooting.