Which command is used to write a kernel debug to a file?

Question

Options

• Afw ctl kdebug -T -I > debug.txt
• Bfw ctl debug -S -t > debug.txt
• Cfw ctl kdebug -T -f > debug.txt
• Dfw ctl debut -T -f > debug.txt

• A
  4% (1)
• B
  4% (1)
• C
  91% (21)

Explanation

fw ctl kdebug is the correct Check Point command for capturing kernel debug output, and -f is the flag that directs that output to a file - making C the right answer. The -T flag adds timestamps to each debug line, which is standard practice for log analysis.

Why the distractors fail:

• A uses -I (capital i) instead of -f - there is no -I flag in this context, making it an invalid command.
• B uses fw ctl debug, which is a different command used to set or clear kernel debug flags/modules, not to write debug output to a file; -S resets flags rather than capturing output.
• D contains a typo - debut instead of debug - making it a non-existent command that would simply error out.

Memory tip: Associate kdebug → -f ile - the "k" stands for kernel and -f sends it to a file. If you see fw ctl debug (without the "k"), think configure flags, not capture output.

No community discussion yet for this question.