CertsPoint
Sign In Get Started
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code 156-587
Exam Name Check Point Certified Troubleshooting Expert - R81.20
Vendor Checkpoint
Total Questions 109
Last Updated 26-Oct, 2026
Free 156-587 Questions Get Premium Access
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free 156-587 Practice Questions

Explore 5 free practice questions for the Checkpoint 156-587 exam and review the answers and explanations to support your preparation.

  1. Question 1

    Single answer

    After kernel debug with “fw ctl debug you received a huge amount of information It was saved in a very large file that is difficult to open and analyze with standard text editors Suggest a solution to

    solve this issue

    • Option A:

      Reduce debug buffer to 1024KB and run debug for several times


      Correct
    • Option B:

      Use Check Point InfoView utility to analyze debug output


      Correct
    • Option C:

      Use “fw ctl zdebug because of 1024KB buffer size


      Correct
    • Option D:

      Divide debug information into smaller files. Use “ fw ctl kdebug -f -o “filename -m 25 - s ‘’1024’’

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: D

    Explanation

     One possible solution to solve the issue of having a very large file that is difficult to open and analyze with standard text editors is to divide the debug information into smaller files. This can be done by using the  fw ctl kdebug  command with the  -f ,  -o ,  -m , and  -s  options. The  -f  option means to write the debug output to a file instead of the screen. The  -o  option specifies the name of the output file. The  -m  option sets the maximum number of files to be created. The  -s  option sets the maximum size of each file in KB. For example, the command  fw ctl kdebug -f -o debug -m 25 -s 1024  will create up to 25 files named debug.0, debug.1, …, debug.24, each with a maximum size of 1024KB. This way, the debug information can be split into more manageable chunks that can be opened and analyzed more easily with standard text editors.

    [:, 1: How to use “fw ctl kdebug” command, 2: How to debug Check Point firewalls, 3: Check Point CLI Reference Card, , ]

  2. Question 2

    Single answer

    Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?

    • Option A:

      cpstat fw -f watchdog


      Correct
    • Option B:

      fw ctl get str watchdog


      Correct
    • Option C:

      cpwd_admin list


      Correct
    • Option D:

      ps -ef | grep watchd

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

    Explanation

    To see the list of processes monitored by the WatchDog process (CPWD), you use the cpwd_admin list command.

      Option A (cpstat fw -f watchdog) : Shows firewall status and statistics for the "fw" context, not necessarily the list of monitored processes.

      Option B (fw ctl get str watchdog) : Not a valid parameter for retrieving the list of monitored processes; “fw ctl” deals with kernel parameters.

      Option C (cpwd_admin list) : Correct command that lists all processes monitored by CPWD, their status, and how many times they have been restarted.

      Option D (ps -ef | grep watchd) : This will list any running process that matches the string “watchd” but will not specifically detail which processes are being monitored by CPWD.

    Therefore, the best answer is cpwd_admin list .

    Check Point Troubleshooting References

      sk97638 : Explains Check Point WatchDog (CPWD) usage and the cpwd_admin utility.

      R81.20 CLI Reference Guide : Describes common troubleshooting commands including cpwd_admin list.

      Check Point Gaia Administration Guide : Provides instructions for monitoring system processes and verifying CPWD.

  3. Question 3

    Single answer

    The Check Point Firewall Kernel is the core component of the Gaia operating system and an integral part of traffic inspection process. There are two procedures available for debugging the firewall kernel. Which procedure/command is used for detailed troubleshooting and needs more resources?

    • Option A:

      fw ctl zdebug


      Correct
    • Option B:

      fw debug/kdebug


      Correct
    • Option C:

      fw ctl debug/kdebug


      Correct
    • Option D:

      fw debug/kdebug ctl

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

  4. Question 4

    Single answer

    What is the proper command for allowing the system to create core files?

    • Option A:

      service core-dump start


      Correct
    • Option B:

      SFWDIR/scripts/core-dump-enable.sh


      Correct
    • Option C:

      set core-dump enable

      > save config


      Correct
    • Option D:

      # set core-dump enable

      # save config

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

  5. Question 5

    Single answer

    Which two files contain the Application Database on the Security Gateway?

    • Option A:

      api_db.C and api_custom_db.C


      Correct
    • Option B:

      apcl_db.C and apd_custom_db.C


      Correct
    • Option C:

      application_db.C and application_custom_db.C


      Correct
    • Option D:

      appi_db.C and appi_custom_db.C

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

    Explanation

    The Application Database on a Check Point Security Gateway stores information about applications and categories used by the Application Control and URL Filtering blades. This database is maintained in specific files on the Gateway.

      Option A : Incorrect. api_db.C and api_custom_db.C are not standard files related to the Application Database. These names may be confused with API-related configurations.

      Option B : Incorrect. apcl_db.C and apd_custom_db.C are not recognized as Application Database files. These names do not align with Check Point’s file naming conventions.

      Option C : Correct. The Application Database is stored in application_db.C (the main database) and application_custom_db.C (custom application definitions). These files are located in the $FWDIR/conf directory on the Security Gateway.

      Option D : Incorrect. appi_db.C and appi_custom_db.C are close but incorrect. The correct prefix is application_, not appi_.

    [:The Check Point R81.20 Security Gateway Administration Guide describes the Application Control and URL Filtering blades, including the storage of application data in application_db.C and application_custom_db.C. The CCTE R81.20 course covers file structures and database management for troubleshooting Application Control issues., For precise details, refer to:, Check Point R81.20 Security Gateway Administration Guide, section on “Application Control and URL Filtering” (available via Check Point Support Center)., CCTE R81.20 Courseware, which includes labs on Application Database management (available through authorized training partners)., , ]