CheckPoint Checkpoint Certifications 156-836 Questions & Answers

• Question 1:

  What Maestro component acts as a load balancer and network switch?

  A. Security Switching Module (SSM)

  B. Maestro Hyperscale Orchestrator (MHO)

  C. Security Group (SG)

  D. Security Gateway Module (SGM)

  Correct Answer: B

• Question 2:

  The drop_monitor command is useful for

  A. Monitoring Check Point code drops

  B. Viewing all interface drops such as RX-ERR, RX-DRP, and RX-OVR

  C. Viewing all drops by Check Point code or the Gaia OS, such as RX-DRP, RX-ERR, and Gaia OS drops.

  D. Showing the system temperature in real-time for multiple components, such as CPU, fan, and SSDs.

  Correct Answer: C

• Question 3:

  Which distribution mode assigns packets to an SGM based solely on the packet destination IP?

  A. User mode

  B. Manual mode

  C. Network mode

  D. Auto-topology mode

  Correct Answer: C

• Question 4:

  What can be learned from the output of sx_api_ports_dump.py command?

  A. Information about backplane bonds

  B. Information about Security Groups

  C. Orchestrator port status

  D. Information about downlink ports only

  Correct Answer: A

• Question 5:

  To display processes that are consuming excessive system resources, users should use the_____ command.

  A. asg perf -v

  B. asg stat -v

  C. top

  D. asg_perf_hogs

  Correct Answer: D

• Question 6:

  In a dual MHO environment, MHO1 and MHO2 are connected to the SGM line cards in which way?

  A. MHO1 and MHO2 are connected to the SGMs using the Sync cable.

  B. MHO1 and MHO2 are connected to the line cards in any order administrators see fit.

  C. MHO 1 is connected to the even-numbered ports, while MHO2 is connected to odd- numbered ports.

  D. MHO 1 is connected to the odd-numbered ports, while MHO2 is connected to even- numbered ports.

  Correct Answer: C

• Question 7:

  Possibilities for a failure in a single SGM of a Security Group include.

  A. A change was made with clish instead of gClish, causing the SGM to handle traffic differently than the other SGMs.

  B. SecureXL is not enabled on the SGM.

  C. An administrator imported a hotfix into the CPUSE repository of a single SGM.

  D. There are too many active SGMs in the SG.

  Correct Answer: C

• Question 8:

  What happens when you make changes from Clish on the SMO Master?

  A. The changes are synchronized to the SMS/MDS as a backup.

  B. The changes are synchronized to the MHO as a backup.

  C. Changes are only applied on the SMO Master.

  D. Changes are applied to all members in the SG.

  Correct Answer: C

• Question 9:

  How does HyperSync work in a Dual Site environment?

  A. Each active connection has two local backups (on the local site) and a third backup connection on the second site (remote site.)

  B. Each active connection has a backup connection on the second site (remote site.)

  C. Each active connection has a local backup (on the local site) and a second backup connection on the second site (remote site.)

  D. Each active connection has a local backup (on the local site) and a second backup connection on each of the MHOs.

  Correct Answer: C

• Question 10:

  Where should sx_api_ports_dump.py command be ran?

  A. Management server

  B. Security Group

  C. Orchestrator

  D. SMO Appliance

  Correct Answer: C