exam questions

Exam 156-585 All Questions

View all questions & answers for the 156-585 exam

Exam 156-585 topic 1 question 70 discussion

Actual exam question from Checkpoint's 156-585
Question #: 70
Topic #: 1
[All 156-585 Questions]

Which is the correct “fw monitor” syntax for creating a capture file for loading it into WireShark?

  • A. fw monitor -e “accept<FILTER EXPRESSION>;” >> Output.cap
  • B. This cannot be accomplished as it is not supported with R80.10
  • C. fw monitor -e “accept<FILTER EXPRESSION>;” -file Output.cap
  • D. fw monitor -e “accept<FILTER EXPRESSION>;” -o Output.cap
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
nmrouter
6 months, 1 week ago
Selected Answer: D
Correct answer is D. https://support.checkpoint.com/results/sk/sk30583
upvoted 1 times
...
rlslima
1 year ago
Selected Answer: D
Answer: D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago