Check Point Certified Multi-Domain Security Management Specialist (CCMS) — Question 31

During firewall kernel debug with fw ctl zdebug you received less information that expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

Answer options

• A. Increase debug buffer; Use fw ctl debug -buf 32768
• B. Redirect debug output to file; Use fw ctl debug-o ./debug.elg
• C. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
• D. Increase debug buffer; Use fw ctl zdebug -buf 32768

Correct answer: C

Explanation

The correct answer is C because using 'fw ctl zdebug -o ./debug.elg' redirects the debug output to a file, which helps capture more information without losing messages. Options A and D involve increasing the debug buffer, which may not be effective if the output is still lost. Option B uses the wrong command, 'fw ctl debug-o', which does not apply to the zdebug process.