CheckPoint Checkpoint Certifications 156-836 Questions & Answers

• Question 41:

  What type of license is required for an MHO?

  A. The MHO requires a NGTP license.

  B. The MHO requires a VSX license.

  C. The MHO does not require a license.

  D. A license is needed for each attached SGM.

  Correct Answer: C

• Question 42:

  What is the throughput penalty of Security Group?

  A. Depends on the type of Appliance

  B. 1% per member

  C. 10% per Security Group with no relation to the number of members

  D. 5% per member

  Correct Answer: B

• Question 43:

  At a minimum, how many management and Uplink ports does a SG require?

  A. Only one of the two interfaces is needed for the Security Group.

  B. Neither are required.

  C. Two of each.

  D. One each.

  Correct Answer: D

• Question 44:

  What will happen in case of NAT of the traffic passing through Management network?

  A. This traffic will not pass correction, since it will be dropped

  B. Orchestrator will disable NAT and traffic will pass with no issue

  C. Since Management traffic is always going to SMO, it will take a care for Correction Layer and will re-distribute traffic to other Appliances

  D. This traffic will pass with no inspection

  Correct Answer: B

• Question 45:

  What does asg monitor command do?

  A. This command does not exist

  B. Monitor health status of entire system

  C. Monitor traffic on Appliances in Security Group

  D. Show real-time cluster status of Appliances in Security Group

  Correct Answer: D

• Question 46:

  What is the purpose of RJ-45 connectors located at the front panel of the Orchestrator MHO-170?

  A. Two Out-of-band interfaces for access to Orchestrator itself

  B. 1Gbps connectivity for Security Groups

  C. Out-of-band interface for access to Orchestrator itself and Serial Console connector

  D. Reserved for internal purposes. Not in use

  Correct Answer: C

• Question 47:

  Which feature is used to force trusted non-F2F traffic into the fully accelerated path for handling by SecureXL.

  A. Fast Accelerator

  B. hypersync

  C. rate limiting

  D. SecureXL

  Correct Answer: D

• Question 48:

  Which command should be used to restart Orchestrator service only?

  A. orchd restart

  B. reboot

  C. service orchestrator restart

  D. cpstop; cpstart

  Correct Answer: A

• Question 49:

  HealthCheck Point _____

  A. is a self-updatable suite of tools for MHOs with the capability to assess the health of the system and provide a timeline of critical and informative events that might have occurred in a production system.

  B. performs a system health check and is meant to replace both a CPInfo and the health check script.

  C. can be used to let you visualize the Firewall topology for the SG and view live statistics, which includes throughput, problem notes, and CPU utilization.

  D. is a self-updatable suite of tools for SGMs with the capability to assess the health of the system, visualize the Firewall topology, provide a timeline of critical and informative events that might have occurred in a production system.

  Correct Answer: D

• Question 50:

  What is the Correction Layer?

  A. Correction Layer is a daemon which corrects errors on Backplane interfaces

  B. Correction Layer is a mechanism which handles asymmetric connections in multi- appliance system. For example, in case of NAT

  C. Correction Layer is a mechanism which activated in case of asymmetric routing

  D. Correction Layer is a Layer of GAIA OS which corrects misspelled commands and allows them to execute

  Correct Answer: B