Exam 156-586 topic 1 question 23 discussion

C is correct per R81 and forward. D achieves the same result with 2 commands, so unnecessary.

sk180488 doesn't mention ikeoff. In step 11 it does however say: Stop the VPN user space debug (this commands stop both the VPND and IKED debugs): vpn debug off So the correct answer is C.

Correct is C.

R81.20 SitetoSiteVPN AdminGuide Turns off the VPN debug (in legacy mode, also turns off the IKE debug). Best Practice - Run one of these commands to stop the VPN daemon debug: vpn debug off vpn debug truncoff Turns off the IKE trace. Run this command to stop the IKE trace: ike debug ikeoff https://support.checkpoint.com/results/sk/sk180488 Stop the VPN user space debug (this commands stop both the VPND and IKED debugs): vpn debug off R81 Site to Site VPN Administration Guide Turns off all VPN debug. Best Practice - Run one of these commands to stop the VPND debug: vpn debug off vpn debug truncoff Turns off IKE debug. Run this command to stop the IKE debug: vpn debug ikeoff Looks like - C vpn debug off

It's D for me: To disable the debug run the commands : vpn debug off; vpn debug ikeoff

If you want to be on the safe side, it's D. On R81.20 , ff you run vpn debug ikeoff in addition it doesn't hurt.

According to the CCTE R80.40 Student and Lab manual, on page 427 it says the following to stop IKE and VPND debugs: vpn debug off TDERROR ALL ALL=O vpn debug ikeoff I don't know if this behavior is the same in R81. However, the exam is about R81, therefore features in R81.10 to R81.999 must be eliminated as an option.

off = Turns off all VPN debug. ikeoff = Turns off IKE debug. They are 2 diferent daemons

Should be C According to Checkpoint documentation: debug vpn off = Turns off all VPN debug In: https://sc1.checkpoint.com/documents/SMB_R80.20.40/CLI/Topics/vpn-debug.htm?TocPath=Configuring%20Site-to-Site%20VPN%7C_____12

Starting from R81.20, it would be C