Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?
Answer(s): C
To see the list of processes monitored by the WatchDog process (CPWD), you use the cpwd_admin list command.Option A (cpstat fw -f watchdog): Shows firewall status and statistics for the "fw" context, not necessarily the list of monitored processes.Option B (fw ctl get str watchdog): Not a valid parameter for retrieving the list of monitored processes; "fw ctl" deals with kernel parameters.Option C (cpwd_admin list): Correct command that lists all processes monitored by CPWD, their status, and how many times they have been restarted.Option D (ps -ef | grep watchd): This will list any running process that matches the string "watchd" but will not specifically detail which processes are being monitored by CPWD.Therefore, the best answer is cpwd_admin list.Check Point Troubleshooting Reference sk97638: Explains Check Point WatchDog (CPWD) usage and the cpwd_admin utility.R81.20 CLI Reference Guide: Describes common troubleshooting commands including cpwd_admin list.Check Point Gaia Administration Guide: Provides instructions for monitoring system processes and verifying CPWD.
What tool would you run to diagnose logging and indexing?
Answer(s): D
You found out that $FWDIR/Iog/fw.log is constantly growing in size at a Security Gateway, what is the reason?
Answer(s): B
What is the best way to resolve an issue caused by a frozen process?
When a process is frozen (hung or unresponsive), the typical method to resolve it is to kill the process. On Check Point, you can use cpwd_admin kill -name <ProcessName> or a standard Linux kill -9 <PID> command if necessary. You then allow CPWD (the Check Point watchdog) to restart it, or manually restart it if needed.Other options:A . Power off the machine: This is too drastic and not recommended just for a single frozen process.B . Restart the process: While this sounds viable, you typically must kill the frozen process first, then let WatchDog or an admin restart it.C . Reboot the machine: Similar to powering off--too disruptive for just one stuck process.Hence, the most direct and standard approach:"Kill the process."Check Point Troubleshooting Reference sk97638 Explanation of CPWD (Check Point WatchDog) and how to manage processes.sk43807 How to gracefully stop or kill a Check Point process.Check Point CLI Reference Guide Details on using cpwd_admin commands to kill or restart processes.
Post your Comments and Discuss Checkpoint 156-587 exam with other Community members:
hab Commented on June 25, 2025 question 40: The Content Awareness kernel process, specifically dlpda, is responsible for analyzing file content and identifying data types within Check Point's Content Awareness (CTNT) software blade Anonymous
hab Commented on June 25, 2025 question 36 - answer is D Anonymous
hab Commented on June 25, 2025 question 29 answer is B Anonymous
hab Commented on June 25, 2025 question 21 - only fw ctl zdebug automatically enables 1MB buffer - answer is B Anonymous