Check Point Certified Troubleshooting Expert - R81.20 156-587 Exam Questions
After kernel debug with “fw ctl debug you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to
solve this issue
Correct Answer: D
One possible solution to solve the issue of having a very large file that is difficult to open and analyze with standard text editors is to divide the debug information into smaller files. This can be done by using the fw ctl kdebug command with the -f , -o , -m , and -s options. The -f option means to write the debug output to a file instead of the screen. The -o option specifies the name of the output file. The -m option sets the maximum number of files to be created. The -s option sets the maximum size of each file in KB. For example, the command fw ctl kdebug -f -o debug -m 25 -s 1024 will create up to 25 files named debug.0, debug.1, …, debug.24, each with a maximum size of 1024KB. This way, the debug information can be split into more manageable chunks that can be opened and analyzed more easily with standard text editors.
Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?
Correct Answer: C
To see the list of processes monitored by the WatchDog process (CPWD), you use the cpwd_admin list command.
Option A (cpstat fw -f watchdog) : Shows firewall status and statistics for the "fw" context, not necessarily the list of monitored processes.
Option B (fw ctl get str watchdog) : Not a valid parameter for retrieving the list of monitored processes; “fw ctl” deals with kernel parameters.
Option C (cpwd_admin list) : Correct command that lists all processes monitored by CPWD, their status, and how many times they have been restarted.
Option D (ps -ef | grep watchd) : This will list any running process that matches the string “watchd” but will not specifically detail which processes are being monitored by CPWD.
Therefore, the best answer is cpwd_admin list .
Check Point Troubleshooting References
sk97638 : Explains Check Point WatchDog (CPWD) usage and the cpwd_admin utility.
R81.20 CLI Reference Guide : Describes common troubleshooting commands including cpwd_admin list.
Check Point Gaia Administration Guide : Provides instructions for monitoring system processes and verifying CPWD.
The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?
Correct Answer: C
What is the proper command for allowing the system to create core files?
Correct Answer: C
Which two files contain the Application Database on the Security Gateway?
Correct Answer: C
The Application Database on a Check Point Security Gateway stores information about applications and categories used by the Application Control and URL Filtering blades. This database is maintained in specific files on the Gateway.
Option A : Incorrect. api_db.C and api_custom_db.C are not standard files related to the Application Database. These names may be confused with API-related configurations.
Option B : Incorrect. apcl_db.C and apd_custom_db.C are not recognized as Application Database files. These names do not align with Check Point’s file naming conventions.
Option C : Correct. The Application Database is stored in application_db.C (the main database) and application_custom_db.C (custom application definitions). These files are located in the $FWDIR/conf directory on the Security Gateway.
Option D : Incorrect. appi_db.C and appi_custom_db.C are close but incorrect. The correct prefix is application_, not appi_.