Winter Special Sale Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 713PS592

156-836 Check Point Certified Maestro Expert (CCME) R81.X Questions and Answers

Questions 4

What is the purpose of RJ-45 connectors located at the front panel of the Orchestrator MHO-170?

Options:

A.

Two Out-of-band interfaces for access to Orchestrator itself

B.

1Gbps connectivity for Security Groups

C.

Out-of-band interface for access to Orchestrator itself and Serial Console connector

D.

Reserved for internal purposes. Not in use

Buy Now
Questions 5

During an upgrade, Is Multi-Version Clustering (MVC) supported?

Options:

A.

No. Maestro does not support MVC because ClusterXL is disabled during an upgrade.

B.

No, Maestro does not support MVC.

C.

Maestro supports MVC or full connectivity upgrade as of R80.40.

D.

Yes, MVC is supported as of R81 for Maestro.

Buy Now
Questions 6

What is the maximum number of Appliances within Security group in Dual-Site configuration?

Options:

A.

28

B.

31

C.

15

D.

16

Buy Now
Questions 7

What type of cluster can a Security Group can be compared to?

Options:

A.

Load Sharing Active / Active

B.

VSLS

C.

Active / Backup

D.

Active / Standby

Buy Now
Questions 8

What does the lldpctl command do?

Options:

A.

Show all devices discovered by LLDP protocol on downlink ports

B.

Show all devices discovered by LLDP protocol on all ports

C.

Discover orchestrators

D.

Show all devices discovered by LLDP protocol on uplink ports

Buy Now
Questions 9

What is the Correction Layer mechanism?

Options:

A.

Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.

B.

The load-balancing mechanism used by the MHO.

C.

The MHO's distribution algorithm which determines the handling SGM for a given connection.

D.

Enforces the access policy on the SGMs and synchronizes the enforcement verdict to other SGMs in the SG.

Buy Now
Questions 10

The core four manual diagnostic tools include:

asg diag verify, asg perf -v, orch_stat -all, and

Options:

A.

asg diag verify

B.

cpinfo

C.

hcp -r all

D.

asg stat -v

Buy Now
Questions 11

Layer 4 distribution is enabled by default in Maestro. Which is not a scenario when you would want to leave this enabled?

Options:

A.

When there is a large number of source ports in use by protocols such as HTTP, HTTPS, and DNS.

B.

When dynamic routing protocols, such as BGP or OSPF are used.

C.

When there is a heavy imbalance of traffic between the SGMs that are members of the same SG.

D.

When the SG is NATing a very high percentage of traffic passing through it.

Buy Now
Questions 12

Where should sx_api_ports_dump.py command be ran?

Options:

A.

Management server

B.

Security Group

C.

Orchestrator

D.

SMO Appliance

Buy Now
Questions 13

Possibilities for a failure in a single SGM of a Security Group include.

Options:

A.

A change was made with clish instead of gClish, causing the SGM to handle traffic differently than the other SGMs.

B.

SecureXL is not enabled on the SGM.

C.

An administrator imported a hotfix into the CPUSE repository of a single SGM.

D.

There are too many active SGMs in the SG.

Buy Now
Questions 14

Which licenses should be issued for the Orchestrator?

Options:

A.

No licenses are required for Orchestrator

B.

Depends on Software Blades enabled on connected appliances

C.

The Orchestrator is considered a Management server, hence it's licensed the same way

D.

The Orchestrator requires NGTX license

Buy Now
Questions 15

What kinds of transceivers are supported on Orchestrator MHO-170?

Options:

A.

SFP, QSFP, QSFP28

B.

SFP+, SFP28, QSFP

C.

SFP, SFP+, SFP28

D.

QSFP, QSFP28

Buy Now
Questions 16

What happens if you apply a hotfix using gClish?

Options:

A.

If you apply a hotfix using gclish, it causes an outage for the entire SG as all members reboot at roughly the same time.

B.

If you apply a hotfix using gclish, each SG members installs the hotfix and reboots after waiting it's turn to do so.

C.

Logical groups "A" and "B" are created. Members of group "A" install and reboot first. Then members of group "B" does the same once reboots have finished with group "A."

D.

If you apply a hotfix using gclish, the operation will fail because an outage would occur.

Buy Now
Questions 17

What kinds of transceivers are supported on Orchestrator MHO-140?

Options:

A.

SFP, QSFP, QSFP28

B.

SFP+, SFP28, QSFP

C.

SFP, SFP+, SFP28

D.

SFP, SFP+, QSFP, QSFP28

Buy Now
Questions 18

The _______ command will allow users to update the specified file on all SGMs.

Options:

A.

g_update_conf_file

B.

g_all"

C.

sed

D.

g_cat

Buy Now
Questions 19

What is the Correction Layer mechanism?

Options:

A.

Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.

B.

The load-balancing mechanism used by the MHO.

C.

The MHO's distribution algorithm which determines the handling SGM for a given connection.

D.

Enforces the access policy on the SGMs and synchronizes the enforcement verdict to other SGMs in the SG.

Buy Now
Questions 20

What is the Correction Layer?

Options:

A.

Correction Layer is a daemon which corrects errors on Backplane interfaces

B.

Correction Layer is a mechanism which handles asymmetric connections in multi-appliance system. For example, in case of NAT

C.

Correction Layer is a mechanism which activated in case of asymmetric routing

D.

Correction Layer is a Layer of GAIA OS which corrects misspelled commands and allows them to execute

Buy Now
Questions 21

There are two 10Gbps dual-port NICs and one 40Gbps NIC installed on a 23800 Appliance in slots 1, 2 and 3 accordingly. Which interfaces should be connected to Orchestrator 1 for downlinks' intra-

orchestrator redundancy when using two Orchestrators?

Options:

A.

Port 1 in Slot 2 and Port 2 in Slot 1

B.

This configuration is not supported

C.

Any pair of available ports

D.

Port 1 in Slot 1 and Port 2 in Slot 1

Buy Now
Questions 22

What is a security group?

Options:

A.

A solution for Security Gateway redundancy and Load Sharing.

B.

A set of appliances of the same model that are collectively managed by the MHO.

C.

A set of network interfaces and individual SGMs assigned to a logical group.

D.

A set of objects in SmartConsole that are responsible for enforcing an access policy.

Buy Now
Exam Code: 156-836
Exam Name: Check Point Certified Maestro Expert (CCME) R81.X
Last Update: Dec 3, 2024
Questions: 75

PDF + Testing Engine

$66  $164.99

Testing Engine

$50  $124.99
buy now 156-836 testing engine

PDF (Q&A)

$42  $104.99
buy now 156-836 pdf