Check Point Certified Automation Specialist (CCAS) — Question 44

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

Answer options

• A. Increase debug buffer; Use fw ctl debug -buf 32768
• B. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
• C. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
• D. Increase debug buffer; Use fw ctl zdebug -buf 32768

Correct answer: C

Explanation

The correct answer is C because using 'fw ctl zdebug -o ./debug.elg' allows you to redirect the debug output to a file, ensuring you capture all messages without loss. Options A and D focus on increasing the debug buffer but do not address the immediate need to save the output, while option B incorrectly uses 'fw ctl debug' instead of 'fw ctl zdebug'.