CheckPoint Checkpoint Certifications 156-836 Questions & Answers

• Question 21:

  What happens if the SMO Master fails?

  A. The next SGM with the current lowest SGM ID assumes the role of the SMO Master.

  B. The Backup SMO Master will take over in the event of a failure with the SMO Master.

  C. A failover will occur on the MHO and traffic will continue to pass.

  D. The Security Group will no longer pass traffic and the issue must be resolved with the SMO Master.

  Correct Answer: A

• Question 22:

  What Maestro component is automatically designated the SMO Master?

  A. The SGM with the lowest member ID (the first one added to the security group.)

  B. The MDS that pushes policy to the SMO is considered the SMO Master.

  C. The first MHO configured is considered the SMO Master.

  D. The SGM with the highest member ID (the last one added to the security group.)

  Correct Answer: A

• Question 23:

  The _______ command will allow users to update the specified file on all SGMs.

  A. g_update_conf_file

  B. g_all"

  C. sed

  D. g_cat

  Correct Answer: A

• Question 24:

  There are two 10Gbps dual-port NIC installed on a 6800 appliance. Which interfaces should be connected to Orchestrator 1 for downlinks' intra-orchestrator redundancy when using two Orchestrators?

  A. Any pair of available ports

  B. Port 1 in Slot 1 and Port 1 in Slot 2

  C. Port 1 in Slot 1 and Port 2 in Slot 1

  D. Port 1 in Slot 2 and Port 2 in Slot 1

  Correct Answer: B

• Question 25:

  Which command do you use to find bottlenecks in the system that are affecting performance, even functionality in some cases?

  A. asg stat -v

  B. asg diag verify

  C. asg perf -v

  D. asg monitor

  Correct Answer: C

• Question 26:

  What is the Orchestrator?

  A. Network Switch

  B. Manager of compute and network resources, load balancer and network switch

  C. Load balancer

  D. None of above

  Correct Answer: B

• Question 27:

  In a Maestro Dual Site environment, what is the definition of the term Active Site.

  A. The Active Site is the site that is not handling any traffic for the specific SG, but itsconnections are synced to its SGMs from the MHOs to be ready in the event of a failover.

  B. The Active Site is the site where the SMO Master exists.

  C. There is no such thing as an active site. In a Dual Site environment, traffic is load balanced.

  D. The Active Site is the site currently handling the enforcement on traffic passing for a specific SG. Connections are synced within the SGMs in the Active Site.

  Correct Answer: D

• Question 28:

  What is the Correction Layer mechanism?

  A. Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.

  B. The load-balancing mechanism used by the MHO.

  C. The MHO's distribution algorithm which determines the handling SGM for a given connection.

  D. Enforces the access policy on the SGMs and synchronizes the enforcement verdict to other SGMs in the SG.

  Correct Answer: A

• Question 29:

  What kinds of transceivers are supported on Orchestrator MHO-170?

  A. SFP, QSFP, QSFP28

  B. SFP+, SFP28, QSFP

  C. SFP, SFP+, SFP28

  D. QSFP, QSFP28

  Correct Answer: D

• Question 30:

  What is the default Distribution mode?

  A. Auto-topology

  B. User

  C. Manual-General

  D. Network

  Correct Answer: A