Check Point Certified Maestro Expert (CCME) R81.X Questions and Answers
Question 21
What is the default Distribution mode?
Options:
A.
Auto-topology
B.
User
C.
Manual-General
D.
Network
Answer:
A
Explanation:
Explanation:
Auto-topology is the default distribution mode for Maestro Security Groups. In this mode, the Orchestrator assigns packets to a Security Group Member based on the topology of the port defined in the gateway object. Each port is either in user mode or network mode depending on the topology. User mode means that the port is connected to the internal network and network mode means that the port is connected to the external network. The Orchestrator uses a hash function to map each source IP or destination IP to a specific SGM, depending on the mode of the port. This mode ensures that all packets with the same source IP or destination IP are processed by the same SGM, regardless of the port or protocol.
•Lari Luoma | Lead Consultant | Maestro SME | Check Point Evangelist1, slide 16
Question 22
When working with Maestro, what is the difference between using Clish and gClish?
Options:
A.
Clish commands are for testing purposes only and cannot be saved, gClish commands apply to all SG members, by default.
B.
Clish commands apply to all UP SG members, by default. gClish commands apply to all SG members, by default.
C.
Clish commands are run on the SG members. gClish commands are run on the MHO and applied to all connected SG members in a specified group.
D.
Clish commands apply only to a specific SG member. gClish commands apply to all UP SG members, by default.
Answer:
D
Explanation:
Explanation:
This is the correct answer because it describes the difference between using Clish and gClish when working with Maestro. Clish is the Check Point command line shell that allows users to configure and manage the SG members individually. gClish is the global Clish that allows users to run commands on all UP SG members of the current Security Group at once. UP SG members are theones that are in the UP state and have the same policy installed as the SMO Master.
References
•Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.3: Global Commands, page 4-11
•Check Point R81 Maestro Administration Guide, Chapter 4: Using the Command Line Interface and WebUI, Section: Global Commands, page 4-9
•Global Expert Mode Commands - Check Point CheckMates