CheckPoint Exam 156-586 Topic 2 Question 20 Discussion

Actual exam question for CheckPoint's 156-586 exam

Question #: 20
Topic #: 2

[All 156-586 Questions]

What is the simplest and most efficient way to check all dropped packets in real time?

Atail -f $FWDIR/log/fw.log |grep drop in expert mode

Bcat /dev/fw1/log in expert mode

Cfw ctl zdebug + drop in expert mode

DSmartlog

Show Suggested Answer

Suggested Answer: C

by Nickole at Jul 07, 2024, 05:36 PM

Limited Time Offer

25%

Off

Get Premium 156-586 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Justa

11 months ago

I find using Smartlog to be the easiest way to check dropped packets, option D) is my choice.

upvoted 0 times

...

Hannah

11 months ago

Haha, 'cat /dev/fw1/log' in expert mode? That's just asking for trouble. I'll stick with the sane options, thanks.

upvoted 0 times

Queen

9 months ago

Yeah, it's better to stick with safer options for real-time monitoring.

upvoted 0 times

...

Zena

10 months ago

Smartlog is also a good option for monitoring dropped packets.

upvoted 0 times

...

Celestine

10 months ago

I prefer using 'fw ctl zdebug + drop' for real-time packet checking.

upvoted 0 times

...

Brandon

10 months ago

I agree, 'cat /dev/fw1/log' can be risky.

upvoted 0 times

...

Golda

11 months ago

D. Smartlog? What kind of fancy tool is that? I say keep it simple with good old-fashioned grep and log tailing.

upvoted 0 times

...

Kristin

11 months ago

I'd go with A. Tailing the fw.log file and grepping for 'drop' is a classic troubleshooting technique. It's simple and gets the job done.

upvoted 0 times

...

Craig

11 months ago

I prefer option C) fw ctl zdebug + drop in expert mode, it provides detailed information.

upvoted 0 times

...

Elise

11 months ago

Option C seems the most straightforward to me. Enabling zdebug and filtering for 'drop' should give you a real-time view of the dropped packets.

upvoted 0 times

Catina

9 months ago

Smartlog is good for historical data, but for real-time checking, option C is the best choice.

upvoted 0 times

...

Casie

9 months ago

I usually use fw ctl zdebug + drop as well, it's quick and efficient.

upvoted 0 times

...

Verlene

9 months ago

I agree, option C is the way to go for real-time monitoring of dropped packets.

upvoted 0 times

...

Jeannine

9 months ago

Smartlog is good for historical data, but for real-time checking, option C is the best choice.

upvoted 0 times

...

Marisha

10 months ago

I usually use fw ctl zdebug + drop as well, it's quick and efficient.

upvoted 0 times

...

Yvonne

10 months ago

I agree, option C is the way to go for real-time monitoring of dropped packets.

upvoted 0 times

...

Kenneth

11 months ago

I think enabling zdebug and filtering for 'drop' is the most efficient method for checking dropped packets in real time.

upvoted 0 times

...

Serita

11 months ago

I agree, option C is the way to go for real-time monitoring of dropped packets.

upvoted 0 times

...

Joye

11 months ago

I agree with Benedict, option A) is efficient for checking dropped packets in real time.

upvoted 0 times

...

Benedict

12 months ago

I think the simplest way is A) tail -f $FWDIR/log/fw.log |grep drop in expert mode.

upvoted 0 times

...