New Year Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Free and Premium Checkpoint 156-836 Dumps Questions Answers

Page: 1 / 6
Total 75 questions

Check Point Certified Maestro Expert (CCME) R81.X Questions and Answers

Question 1

What is the difference between Dual-Site and Dual-Room?

Options:

A.

Dual-Room is a kind of Dual-Site deployment within the same building

B.

Dual-Room is Active / Standby and Dual-Site is Active / Active

C.

Dual-Room is a Single-Site deployment where all Appliances are connected to both orchestrators

D.

They are the same

Buy Now
Question 2

What is the max amount of Orchestrators in Dual-site setup?

Options:

A.

2 per Security Group

B.

4 per Security Group

C.

2

D.

4

Question 3

What is the throughput penalty of Security Group?

Options:

A.

Depends on the type of Appliance

B.

1% per member

C.

10% per Security Group with no relation to the number of members

D.

5% per member

Question 4

What kinds of transceivers are supported on Orchestrator MHO-140?

Options:

A.

SFP, QSFP, QSFP28

B.

SFP+, SFP28, QSFP

C.

SFP, SFP+, SFP28

D.

SFP, SFP+, QSFP, QSFP28

Question 5

There are two 10Gbps dual-port NICs and one 40Gbps NIC installed on a 23800 Appliance in slots 1, 2 and 3 accordingly. Which interfaces should be connected to Orchestrator 1 for downlinks' intra-

orchestrator redundancy when using two Orchestrators?

Options:

A.

Port 1 in Slot 2 and Port 2 in Slot 1

B.

This configuration is not supported

C.

Any pair of available ports

D.

Port 1 in Slot 1 and Port 2 in Slot 1

Question 6

Which licenses should be issued for the Orchestrator?

Options:

A.

No licenses are required for Orchestrator

B.

Depends on Software Blades enabled on connected appliances

C.

The Orchestrator is considered a Management server, hence it's licensed the same way

D.

The Orchestrator requires NGTX license

Question 7

There are two appliances within the same Security Group. One of them is connected by One downlink only, another one by Two downlinks. Assuming there's no NAT and no VPN, what would be proportion of traffic distribution done by Orchestrator?

Options:

A.

100%/0%

B.

33%/66%

C.

50%/50%

D.

66%/33%

Question 8

HealthCheck Point _____

Options:

A.

is a self-updatable suite of tools for MHOs with the capability to assess the health of the system and provide a timeline of critical and informative events that might have occurred in a production system.

B.

performs a system health check and is meant to replace both a CPInfo and the health check script.

C.

can be used to let you visualize the Firewall topology for the SG and view live statistics, which includes throughput, problem notes, and CPU utilization.

D.

is a self-updatable suite of tools for SGMs with the capability to assess the health of the system, visualize the Firewall topology, provide a timeline of critical and informative events that might have occurred in a production system.

Question 9

Where should sx_api_ports_dump.py command be ran?

Options:

A.

Management server

B.

Security Group

C.

Orchestrator

D.

SMO Appliance

Question 10

What does the lldpctl command do?

Options:

A.

Show all devices discovered by LLDP protocol on downlink ports

B.

Show all devices discovered by LLDP protocol on all ports

C.

Discover orchestrators

D.

Show all devices discovered by LLDP protocol on uplink ports

Question 11

Which distribution mode assigns packets to an SGM based solely on the packet destination IP?

Options:

A.

User mode

B.

Manual mode

C.

Network mode

D.

Auto-topology mode

Question 12

Maestro allows running commands globally in Expert mode by using global prefixes, such as:

Options:

A.

asg all

B.

g_all

C.

all

D.

global

Question 13

What is the purpose of RJ-45 connectors located at the front panel of the Orchestrator MHO-170?

Options:

A.

Two Out-of-band interfaces for access to Orchestrator itself

B.

1Gbps connectivity for Security Groups

C.

Out-of-band interface for access to Orchestrator itself and Serial Console connector

D.

Reserved for internal purposes. Not in use

Question 14

What is a security group?

Options:

A.

A solution for Security Gateway redundancy and Load Sharing.

B.

A set of appliances of the same model that are collectively managed by the MHO.

C.

A set of network interfaces and individual SGMs assigned to a logical group.

D.

A set of objects in SmartConsole that are responsible for enforcing an access policy.

Question 15

At a minimum, how many management and Uplink ports does a SG require?

Options:

A.

Only one of the two interfaces is needed for the Security Group.

B.

Neither are required.

C.

Two of each.

D.

One each.

Question 16

What type of cluster can a Security Group can be compared to?

Options:

A.

Load Sharing Active / Active

B.

VSLS

C.

Active / Backup

D.

Active / Standby

Question 17

Possibilities for a failure in a single SGM of a Security Group include.

Options:

A.

A change was made with clish instead of gClish, causing the SGM to handle traffic differently than the other SGMs.

B.

SecureXL is not enabled on the SGM.

C.

An administrator imported a hotfix into the CPUSE repository of a single SGM.

D.

There are too many active SGMs in the SG.

Question 18

What is the Orchestrator?

Options:

A.

Network Switch

B.

Manager of compute and network resources, load balancer and network switch

C.

Load balancer

D.

None of above

Question 19

What does asg monitor command do?

Options:

A.

This command does not exist

B.

Monitor health status of entire system

C.

Monitor traffic on Appliances in Security Group

D.

Show real-time cluster status of Appliances in Security Group

Question 20

What kinds of transceivers are supported on Orchestrator MHO-170?

Options:

A.

SFP, QSFP, QSFP28

B.

SFP+, SFP28, QSFP

C.

SFP, SFP+, SFP28

D.

QSFP, QSFP28

Question 21

What is the default Distribution mode?

Options:

A.

Auto-topology

B.

User

C.

Manual-General

D.

Network

Question 22

When working with Maestro, what is the difference between using Clish and gClish?

Options:

A.

Clish commands are for testing purposes only and cannot be saved, gClish commands apply to all SG members, by default.

B.

Clish commands apply to all UP SG members, by default. gClish commands apply to all SG members, by default.

C.

Clish commands are run on the SG members. gClish commands are run on the MHO and applied to all connected SG members in a specified group.

D.

Clish commands apply only to a specific SG member. gClish commands apply to all UP SG members, by default.

Page: 1 / 6
Total 75 questions