Check Point Certified Cloud Specialist (CCCS) R82 — Question 28

When debugging is enabled on firewall kernel module using the ‘fw ctl debug’ command with required options, many debug messages are provided by the kernel that help the administrator to identify issues. Which of the following is true about these debug messages generated by the kernel module?

Answer options

• A. Messages are written to a buffer and collected using ‘fw ctl kdebug’
• B. Messages are written to console and also /var/log/messages file
• C. Messages are written to /etc/dmesg file
• D. Messages are written to $FWDIR/log/fw.elg

Correct answer: A

Explanation

The correct answer is A because when debugging is enabled, the messages are indeed stored in a buffer and can be retrieved using the ‘fw ctl kdebug’ command. Option B is incorrect as it suggests messages are written to the console and a log file, which is not accurate for this scenario. Option C is wrong because the /etc/dmesg file is not where these debug messages are directed. Option D is also incorrect as the messages are not logged in the specified fw.elg file.