Which is that extra file?

If VPN-1/FW-1 has a blue screen crash on a Windows NT platform, there is an extra file you
should include in those sent to Checkpoint for analysis. Which is that extra file?

A.
WINNT\system.dmp

B.
WINNT\user.dmp

C.
WINNT\memory.dmp

D.
WINNT\core.dmp

Explanation:

The description and format of the event log differs from the format that is displayed when the
computer is writing the Memory.dmp file, but the majority of the information is the same. Below is
an example of the event log:
Event ID: 1001 Source: Save Dump Description: The computer has rebooted from a bugcheck.
The bugcheck was : 0xc000021a (0xe1270188, 0x00000001, 0x00000000, 0x00000000).
Microsoft Windows NT (v15.1381). A dump was saved in: C:\WINNT\MEMORY.DMP.
Reference: Microsoft Knowledge Base Article – 192463, Gathering Blue Screen Information After
Memory Dump in Windows 2000 or Windows NT