Exam 156-585 All QuestionsBrowse all questions from this exam
Go to Exam
Question 46

Some users from your organization have been reported some connection problems with CIFS since this morning. You suspect an IPS Issue after an automatic IPS update last night. So you want to perform a packet capture on uppercase I only directly after the IPS module (position 4 in the chain) to check if the packets pass the IPS. What command do you need to run?

    Correct Answer: B

    To perform a packet capture directly after the IPS module (position 4), the correct command syntax is 'fw monitor -pi 5 -e <filterexpression>'. The '-pi 5' specifies that the capture should be taken at position 5, which is the position immediately after the IPS module in the inspection chain.

Discussion
nmrouterOption: A

Correct answer is A