The Check Point WatchDog process (cpwd) is responsible for monitoring critical Check Point processes and restarting them if they fail. The cpwdadmin utility is the command-line tool used to manage and view the status of the WatchDog. The list argument specifically displays the table of processes that cpwd is configured to monitor, including their process ID (PID), status, and command. This command provides a direct and authoritative view of the WatchDog's monitoring configuration.

A. cpstat fw -f watchdog

This command is incorrect. cpstat is used for viewing performance statistics of Check Point applications, and the fw module relates to the firewall, not the WatchDog's configuration.

B. fw ctl get str watchdog

This command is incorrect. fw ctl get is a low-level utility used to retrieve the value of firewall kernel parameters, not to list processes monitored by a user-space daemon.

D. ps -ef | grep watchd

This command is incorrect. It is a standard OS command that will only show the WatchDog process (cpwd) itself, not the list of other processes that it is actively monitoring.

1. Check Point R81.10 CLI Reference Guide, Page 288, "cpwdadmin". The guide explicitly states: "cpwdadmin list - Displays the list of processes that are currently monitored by the WatchDog."

2. Check Point Security Gateway and Management R80.10 Administration Guide, Chapter "System Management", Section "Processes", Sub-section "cpwd". The documentation describes the function of cpwd and references cpwdadmin as the tool for its administration.

3. Check Point Support Center, sk65385 "How to list all processes that are monitored by cpwd". This official support article confirms that cpwdadmin list is the correct command to "list all processes that are monitored by the Check Point WatchDog".