CheckPoint Exam 156-582 Topic 5 Question 7 Discussion

Actual exam question for CheckPoint's 156-582 exam

Question #: 7
Topic #: 5

[All 156-582 Questions]

Running tcpdump causes a significant increase on CPU usage, what other option should you use?

Afw monitor

BWait for out of business hours to do a packet capture

Ccppcap

DYou need to use tcpdump with -e option to decrease the length of packet in captures and it will utilize the less CPU

Show Suggested Answer

Suggested Answer: A

Yes, it is possible to analyze ICMP packets with tcpdump. While tcpdump is often associated with capturing TCP packets, it is not limited to them and can capture and analyze any protocol that traverses the network, including ICMP, which operates at Layer 3 (Network Layer) of the OSI model. ICMP packets do not use ports, but tcpdump can filter and display these packets based on other criteria such as type and code fields.

by Shonda at Jan 27, 2025, 02:07 AM

Limited Time Offer

25%

Off

Get Premium 156-582 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tamera

30 days ago

If I wanted to increase CPU usage, I'd just run a cryptocurrency miner in the background. At least I'd get some digital coins out of it.

upvoted 0 times

...

Alaine

1 months ago

I think the -e option in tcpdump is the way to go. It's like using a scalpel instead of a sledgehammer to get the job done.

upvoted 0 times

Clement

2 days ago

C) cppcap

upvoted 0 times

...

Marylin

3 days ago

B) Wait for out of business hours to do a packet capture

upvoted 0 times

...

Francis

4 days ago

A) fw monitor

upvoted 0 times

...

Barrie

1 months ago

Waiting for out of business hours to do a packet capture? That's like waiting for a meteor to hit the earth to get a chance to observe it. Not very practical.

upvoted 0 times