CheckPoint Checkpoint Certifications 156-835 Questions & Answers

• Question 1:

  There are two appliances within the same Security Group. One of them is connected by One downlink only, another one by Two downlinks. Assuming there's no NAT and no VPN, what would be proportion of traffic distribution done by Orchestrator?

  A. 66%/33%

  B. 100%/0%

  C. 50%/50%

  D. 33%/66%

  Correct Answer: C

• Question 2:

  What is the Orchestrator?

  A. Load balancer

  B. Network Switch

  C. Manager of compute and network resources, load balancer and network switch

  D. None of above

  Correct Answer: D

• Question 3:

  Which file on Appliance includes information about Security Group?

  A. /etc/chassisdb.json

  B. /etc/sgdb.json

  C. /etc/smodb.json

  D. /etc/distutiljson

  Correct Answer: B

• Question 4:

  There are two 10Gbps dual-port NIC installed on a 6800 appliance. Which interfaces should be connected to Orchestrator 1 for downlinks' intra-orchestrator redundancy when using two Orchestrators?

  A. Port 1 in Slot 1 and Port 2 in Slot 1

  B. Port 1 in Slot 2 and Port 2 in Slot 1

  C. Any pair of available ports

  D. Port 1 in Slot 1 and Port 1 in Slot 2

  Correct Answer: D

• Question 5:

  What is the default Distribution mode?

  A. User

  B. Auto-topology

  C. Manual-General

  D. Network

  Correct Answer: B

  In Check Point firewall, the default Distribution mode is Auto-topology. Auto- topology uses the built-in algorithm to automatically determine the best way to distribute the traffic across the firewall cluster, based on the topology of the network

  and the current load on the cluster members.

  Auto-topology takes into account the available bandwidth and the CPU utilization of each cluster member, and then makes decisions on how to distribute the traffic across the cluster in real-time. It is a dynamic and adaptive mode that

  ensures the best use of the available resources and the highest level of performance.

• Question 6:

  Which setting is required in order to connect an appliance with 40Gbps downlink interface and DAC to the Orchestrator MHO-140?

  A. On Orchestrator: Change QSFP mode from 100Gbps to 40Gbps

  B. On Orchestrator: Change port type from uplink to downlink

  C. On Appliance: Change a port speed to 10Gbps

  D. No change required

  Correct Answer: B

• Question 7:

  What is the purpose of Management ports located on the Rear Panel of the Orchestrator MHO-140?

  A. Reserved for internal purposes. Not in use.

  B. Out-of-band interfaces for access to Orchestrator itself.

  C. 1Gbps connectivity for Security Groups.

  D. Additional ports used as uplinks.

  Correct Answer: B

• Question 8:

  What is the default range of physical ports for downlinks on Orchestrator MHO-140?

  A. 25 - 47

  B. 27 - 47

  C. 1 - 48

  D. 1 - 25

  Correct Answer: B

• Question 9:

  What is the default IP range of CIN network (with no increment)?

  A. 192.168.1.0

  B. 198.51.100.0

  C. The same as Management network

  D. 192.0.2.0

  Correct Answer: B

• Question 10:

  What is the maximum amount of Appliances within Security group in Dual-Site configuration?

  A. 16

  B. 15

  C. 28

  D. 31

  Correct Answer: C