49位 Check Point provides tools & commands to help you to identify issues about products and applications.
Which Check Point command can help you to display status and statistics information for various Check Point products and applications?
The correct Check Point command to display status and statistics information for various Check Point products and applications is cpstat. This command provides a dynamic real-time view of the system, showing the information such as the number of connections, packets, drops, CPU usage, memory usage, disk space, license status, and blade status. The cpstat command can be customized by using various options and flags to specify the product, the interval, the fields, and the format of the output. For example, to display the status and statistics of the firewall module every 5 seconds, the command would be:
cpstat fw -f all -i 5
The other commands are incorrect because:
* A. CPview is a Check Point tool that displays information about the system performance, such as the CPU, memory, disk, network, and firewall. It does not show information about other products and applications, such as VPN, Identity Awareness, Anti-Virus, etc.
* C. fwstat is not a valid command. The correct command is fw ctl pstat, which displays information about the firewall kernel, such as the number of connections, packets, drops, memory, and synchronization. It does not show information about other products and applications, such as VPN, Identity Awareness, Anti-Virus, etc.
* D. CPstat is not a valid command. The correct command is cpstat, which is case-sensitive.
参考文献
* cpstat – Check Point Software
* CPView Utility
* fw ctl pstat – Check Point Software
* (CCTE) – Check Point Software
NO.57 When viewing data for CPMI objects in the Postgres database, what table column should be selected to query for the object instance?
The CpmiHostCkp table in the Postgres database contains the data for CPMI objects, such as gateways, clusters, and servers. The table column that should be selected to query for the object instance is the objid column, which is the primary key of the table and uniquely identifies each object. The objid column can be used to join with other tables that reference CPMI objects, such as CpmiClusterMember, CpmiCluster, and CpmiServer. The objid column can also be used to retrieve the object name, IP address, type, and other attributes from the CpmiHostCkp table itself. Reference:
Check Point Database Tool (GuiDBedit Tool) – Section: How to use the Check Point Database Tool (GuiDBedit Tool) – Subsection: How to view the data in the database Check Point Certified Troubleshooting Expert (CCTE) – Exam Topics – Module 6: Advanced Management Server Troubleshooting
[Check Point R81 Database Schema] – Section: CPMI Tables – Subsection: CpmiHostCkp Table
NO.58 The Check Point Watch Daemon (CPWD) monitors critical Check Point processes, terminating them or restarting them as needed to maintain consistent, stable operating conditions. When checking the status/output of CPWD you are able to see some columns like APP, PID, STAT, START, etc. What is the column “STAT” used for?
The STAT column in the output of the cpwd_admin list command shows the status of the monitored process.
The possible values are E for established, meaning that the process is running, or T for terminated, meaning that the process is not running. The STAT column is useful for quickly checking if any critical process has crashed or failed to start. If the value is T, the process should be restarted and the reason for the termination should be investigated. The STAT column does not show the Watch Dog name, the number of times the process was started, or the monitoring method of the Watch Dog.