CheckPoint Exam 156-582 Topic 5 Question 7 Discussion

Actual exam question for CheckPoint's 156-582 exam

Question #: 7
Topic #: 5

[All 156-582 Questions]

Running tcpdump causes a significant increase on CPU usage, what other option should you use?

Afw monitor

BWait for out of business hours to do a packet capture

Ccppcap

DYou need to use tcpdump with -e option to decrease the length of packet in captures and it will utilize the less CPU

Show Suggested Answer

Suggested Answer: A

Yes, it is possible to analyze ICMP packets with tcpdump. While tcpdump is often associated with capturing TCP packets, it is not limited to them and can capture and analyze any protocol that traverses the network, including ICMP, which operates at Layer 3 (Network Layer) of the OSI model. ICMP packets do not use ports, but tcpdump can filter and display these packets based on other criteria such as type and code fields.

by Shonda at Jan 27, 2025, 02:07 AM

Limited Time Offer

25%

Off

Get Premium 156-582 Questions as Interactive Web-Based Practice Test or PDF