Free 156-587 Exam Braindumps
Check Point Certified Troubleshooting Expert - R81.20 Questions 16–20 (page: 5)

Updated On: 10-Feb-2026

When a User process or program suddenly crashes, a core dump is often used to examine the problem Which command is used to enable the core-dumping via GAIA clish?

  1. set core-dump enable
  2. set core-dump total
  3. set user-dump enable
  4. set core-dump per_process

Answer(s): A

Explanation:

In Check Point Gaia, you can enable core dumping through the command line interface (clish) using the following command:

set core-dump enable

This command activates the core dump mechanism, allowing the system to generate core dump files when user processes crash. Remember to save the configuration after enabling core dumps with the command:

save config

Why other options are incorrect:

B . set core-dump total: This command is used to set the total disk space limit for core dump files, not to enable core dumping itself.

C . set user-dump enable: There is no such command in Gaia clish for enabling core dumps.

D . set core-dump per_process: This command sets the maximum number of core dump files allowed per process, but it doesn't enable core dumping.

Check Point Troubleshooting


Reference:

Check Point R81.20 Security Administration Guide: This guide provides comprehensive information about Gaia clish commands, including those related to system configuration and troubleshooting.

Check Point sk92764: This knowledge base article specifically addresses core dump management in Gaia, explaining how to enable and configure core dumps.

Enabling core dumps is a crucial step in troubleshooting process crashes as it provides valuable information for analysis and debugging.



What is NOT a benefit of the `fw ctl zdebug' command?

  1. Automatically allocate a 1MB buffer
  2. Collect debug messages from the kernel
  3. Cannot be used to debug additional modules
  4. Clean the buffer

Answer(s): C

Explanation:

The fw ctl zdebug command is a powerful tool that can be used to collect debug messages from the kernel, clean the buffer, and automatically allocate a 1MB buffer. However, it cannot be used to debug additional modules, such as SecureXL, CoreXL, or VPN. For those modules, other commands or tools are needed, such as fwaccel dbg, fw ctl affinity, or vpn debug.


Reference:

2: "fw ctl zdebug" - Helpful Command Combinations

3: How to use " fw ctl zdebug" command

Troubleshooting Expert R81.1 (CCTE) Course Outline) - Module 4: Debugging Tools and Methods



When debugging is enabled on firewall kernel module using the fw ctl debug' command with required options, many debug messages are provided by the kernel that help the administrator to identify

Issues.
Which of the following is true about these debug messages generated by the kernel module?

  1. Messages are written to /etc/dmesg file
  2. Messages are written to a buffer and collected using `fw ctl kdebug
  3. Messages are written to SFWDIR
  4. Messages are written to console and also /var/log/messages file

Answer(s): B



During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started.
What should you do to resolve this issue?

  1. Increase debug buffer Use fw ctl debug -buf 32768
  2. Redirect debug output to file; Use fw ctl debug -o /debug.elg
  3. Redirect debug output to file; Use fw ctl zdebug -o /debug.elg
  4. Increase debug buffer; Use fw ctl zdebug -buf 32768

Answer(s): A



You need to run a kernel debug over a longer period of time as the problem occurs only once or twice a week. Therefore you need to add a timestamp to the kernel debug and write the output to a file but you cant afford to fill up all the remaining disk space and you only have 10 GB free for saving the debugs What is the correct syntax for this?

  1. A fw ctl kdebug -T -f -m 10 -s 1000000 -o debugfilename
  2. fw ctl debug -T -f-m 10 -s 1000000 -o debugfilename
  3. fw ctl kdebug -T -f -m 10 -s 1000000 > debugfilename
  4. fw ctl kdebug -T -m 10 -s 1000000 -o debugfilename

Answer(s): A



Viewing page 5 of 23
Viewing questions 21 - 25 out of 109 questions


Post your Comments and Discuss Checkpoint 156-587 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!