156-582 practice question 1 of 15

You want to print the status of WatchDog-monitored processes. What command best meets your needs?

Full set: 75 questions
Answer options
A: cpwd_admin list Correct answer
B: tcpdump
C: cppcap
D: cpplic print
Correct Answer:
A. cpwd_admin list
Explanation

The cpwdadmin list command is the correct tool for this task. cpwd is the Check Point WatchDog process, which is responsible for monitoring the state of critical Check Point daemons. The cpwdadmin utility is used to interact with and manage the WatchDog. The list argument specifically instructs the utility to display a table of all processes currently under WatchDog's supervision, including their Process ID (PID), status (e.g., 'E' for executing), and start time. This directly fulfills the requirement to print the status of WatchDog-monitored processes.

Why Incorrect

B. tcpdump: This is a standard command-line packet analyzer; it captures network traffic and is not used for monitoring process status.
C. cppcap: This is a Check Point utility for capturing network packets, similar to tcpdump but with specific kernel integrations. It does not show process status.
D. cpplic print: This command is used to view and manage Check Point software licenses installed on the system, not for process monitoring.

References

1. Check Point R81.10 CLI Reference Guide:

Page: 198

Section: cpwdadmin

Quote: "Use the cpwdadmin command to configure the Check Point WatchDog... cpwdadmin list - Shows the list of processes monitored by WatchDog and their status, pids, etc."

2. Check Point Support Center, SK Article sk33832:

Title: Check Point WatchDog

Section: Important cpwdadmin commands

Content: The article lists cpwdadmin list as the command to "show the list of processes monitored by WatchDog and their status."

Scroll to Top