CheckPoint Exam 156-586 Topic 2 Question 20 Discussion

Actual exam question for CheckPoint's 156-586 exam

Question #: 20
Topic #: 2

[All 156-586 Questions]

What is the simplest and most efficient way to check all dropped packets in real time?

Atail -f $FWDIR/log/fw.log |grep drop in expert mode

Bcat /dev/fw1/log in expert mode

Cfw ctl zdebug + drop in expert mode

DSmartlog

Show Suggested Answer

Suggested Answer: C

by Nickole at Jul 07, 2024, 05:36 PM

Limited Time Offer

25%

Off

Get Premium 156-586 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Justa

1 months ago

I find using Smartlog to be the easiest way to check dropped packets, option D) is my choice.

upvoted 0 times

...

Hannah

1 months ago

Haha, 'cat /dev/fw1/log' in expert mode? That's just asking for trouble. I'll stick with the sane options, thanks.

upvoted 0 times

Brandon

6 days ago

I agree, 'cat /dev/fw1/log' can be risky.

upvoted 0 times

...

Golda

1 months ago

D. Smartlog? What kind of fancy tool is that? I say keep it simple with good old-fashioned grep and log tailing.

upvoted 0 times

...

Kristin

1 months ago

I'd go with A. Tailing the fw.log file and grepping for 'drop' is a classic troubleshooting technique. It's simple and gets the job done.

upvoted 0 times

...

Craig

1 months ago

I prefer option C) fw ctl zdebug + drop in expert mode, it provides detailed information.

upvoted 0 times

...

Elise

1 months ago

Option C seems the most straightforward to me. Enabling zdebug and filtering for 'drop' should give you a real-time view of the dropped packets.

upvoted 0 times

Marisha

3 days ago

I usually use fw ctl zdebug + drop as well, it's quick and efficient.

upvoted 0 times

...

Yvonne

5 days ago

I agree, option C is the way to go for real-time monitoring of dropped packets.

upvoted 0 times

...

Kenneth

29 days ago

I think enabling zdebug and filtering for 'drop' is the most efficient method for checking dropped packets in real time.

upvoted 0 times

...

Serita

1 months ago

I agree, option C is the way to go for real-time monitoring of dropped packets.

upvoted 0 times

...

Joye

2 months ago

I agree with Benedict, option A) is efficient for checking dropped packets in real time.

upvoted 0 times

...

Benedict

2 months ago

I think the simplest way is A) tail -f $FWDIR/log/fw.log |grep drop in expert mode.

upvoted 0 times

...