Which of the following is a valid way to capture packets on Check Point gateways?

Which of the following is a valid way to capture packets on Check Point gateways?
A . Firewall logs
B . Wireshark
C . tcpdump
D . Network taps

View Answer

Answer: C

Explanation:

tcpdump is a valid and commonly used tool for capturing packets on Check Point gateways. It allows administrators to capture and analyze network traffic directly from the command line. While Wireshark can be used to analyze the captured packets, the actual capture is typically performed using tcpdump. Network taps are hardware devices and not software methods, and firewall logs provide event logging rather than packet-level capture.