CheckPoint Checkpoint Certifications 156-836 Questions & Answers

• Question 51:

  What command can be run to show which SGM is selected to receive traffic?

  A. g_tcpdump

  B. asg monitor

  C. dxl calc

  D. asg calc

  Correct Answer: D

• Question 52:

  What type of cluster can a Security Group can be compared to?

  A. Load Sharing Active / Active

  B. VSLS

  C. Active / Backup

  D. Active / Standby

  Correct Answer: A

• Question 53:

  Which licenses should be issued for the Orchestrator?

  A. No licenses are required for Orchestrator

  B. Depends on Software Blades enabled on connected appliances

  C. The Orchestrator is considered a Management server, hence it's licensed the same way

  D. The Orchestrator requires NGTX license

  Correct Answer: A

• Question 54:

  What cannot be learned from the output of asg monitor command?

  A. Uptime

  B. Port status

  C. Security Policy status

  D. Appliances cluster status

  Correct Answer: C

• Question 55:

  Which blade configuration files should be backed up on the SG if upgrading from R80.30SP or earlier?

  A. IPS configuration files

  B. fwkern.conf files.

  C. VPN configuration files

  D. Mobile Access configuration files.

  Correct Answer: A

• Question 56:

  While looking at your system's correction statistics, you notice you have a correction rate approaching 100 percent. Is this a problem?

  A. A correction rate above 90 percent indicates a need to disable Layer 4 Distribution.

  B. A correction rate approaching 100 percent of all connections is unusual. This is a cause for concern because the SGMs may fail to process traffic.

  C. If correction rates are higher than 80 percent, latency is expected.

  D. In some scenarios, a correction rate approaching 100 percent of all connections is not unusual. This is not usually a cause for concern as the correction mechanism is fast and efficient.

  Correct Answer: B

• Question 57:

  What is the max amount of Orchestrators in Dual-site setup?

  A. 2 per Security Group

  B. 4 per Security Group

  C. 2

  D. 4

  Correct Answer: B

• Question 58:

  What is the difference between Dual-Site and Dual-Room?

  A. Dual-Room is a kind of Dual-Site deployment within the same building

  B. Dual-Room is Active / Standby and Dual-Site is Active / Active

  C. Dual-Room is a Single-Site deployment where all Appliances are connected to both orchestrators

  D. They are the same

  Correct Answer: A

• Question 59:

  What is the maximum number of Appliances within Security group in Dual-Site configuration?

  A. 28

  B. 31

  C. 15

  D. 16

  Correct Answer: A

• Question 60:

  Multiple SGs can exist in a Dual Site environment. Each SG can be configured in one of three ways. Which is not one of those ways?

  A. Two MHOs connected to two MHOs via load balancers.

  B. Two MHOs at same site connected to remote site MHOs via two different switches.

  C. Two MHOs at same site connected to remote site MHOs via single switch.

  D. Direct connectivity between Remote Site MHOs.

  Correct Answer: A