CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-587

Free 156-587 Exam Braindumps (page: 3)

Page 2 of 21
PDF with 78 Questions

Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?

  1. cpstat fw -f watchdog
  2. fw ctl get str watchdog
  3. cpwd_admin list
  4. ps -ef | grep watchd

Answer(s): C

Explanation:

To see the list of processes monitored by the WatchDog process (CPWD), you use the cpwd_admin list command.

Option A (cpstat fw -f watchdog): Shows firewall status and statistics for the "fw" context, not necessarily the list of monitored processes.

Option B (fw ctl get str watchdog): Not a valid parameter for retrieving the list of monitored processes; "fw ctl" deals with kernel parameters.

Option C (cpwd_admin list): Correct command that lists all processes monitored by CPWD, their status, and how many times they have been restarted.

Option D (ps -ef | grep watchd): This will list any running process that matches the string "watchd" but will not specifically detail which processes are being monitored by CPWD.

Therefore, the best answer is cpwd_admin list.

Check Point Troubleshooting Reference sk97638: Explains Check Point WatchDog (CPWD) usage and the cpwd_admin utility.

R81.20 CLI Reference Guide: Describes common troubleshooting commands including cpwd_admin list.

Check Point Gaia Administration Guide: Provides instructions for monitoring system processes and verifying CPWD.



What tool would you run to diagnose logging and indexing?

  1. run cpm_doctor.sh
  2. cpstat mg -f log_server
  3. run diagnostic view
  4. run doctor-log.sh

Answer(s): D



You found out that $FWDIR/Iog/fw.log is constantly growing in size at a Security Gateway, what is the reason?

  1. TCP state logging is enabled
  2. Its not a problem the gateways is logging connections and also sessions
  3. fw.log can grow when GW does not have space in logging directory
  4. The GW is logging locally

Answer(s): B



What is the best way to resolve an issue caused by a frozen process?

  1. Power off the machine
  2. Restart the process
  3. Reboot the machine
  4. Kill the process

Answer(s): D

Explanation:

When a process is frozen (hung or unresponsive), the typical method to resolve it is to kill the process. On Check Point, you can use cpwd_admin kill -name <ProcessName> or a standard Linux kill -9 <PID> command if necessary. You then allow CPWD (the Check Point watchdog) to restart it, or manually restart it if needed.

Other options:

A . Power off the machine: This is too drastic and not recommended just for a single frozen process.

B . Restart the process: While this sounds viable, you typically must kill the frozen process first, then let WatchDog or an admin restart it.

C . Reboot the machine: Similar to powering off--too disruptive for just one stuck process.

Hence, the most direct and standard approach:
"Kill the process."

Check Point Troubleshooting Reference sk97638 ­ Explanation of CPWD (Check Point WatchDog) and how to manage processes.

sk43807 ­ How to gracefully stop or kill a Check Point process.

Check Point CLI Reference Guide ­ Details on using cpwd_admin commands to kill or restart processes.






Post your Comments and Discuss Checkpoint 156-587 exam with other Community members: