Check Point 156-836 CCME Exam Dumps

dumps2024-04-01T10:14:51+08:00

156-836 exam is a new one for Check Point CCME certification. To take the Check Point 156-836 exam, you will apply knowledge of Maestro implementation, deployment, and capabilities to utilize current hardware investment and maximize appliance capacity, simplify data center workflow orchestration and scale up existing Check Point security gateways on demand. We provide the latest Check Point 156-836 CCME exam dumps, which can guarantee you pass the test easily. Free Check Point 156-836 CCME exam dumps are available below.

Page 1 of 3

1. What Maestro component is automatically designated the SMO Master?

The SGM with the lowest member ID (the first one added to the security group.)

The MDS that pushes policy to the SMO is considered the SMO Master.

The first MHO configured is considered the SMO Master.

The SGM with the highest member ID (the last one added to the security group.)

2. What is a downlink interface used for?

To connect appliances to Orchestrators

To connect appliances to customer's infrastructure

To connect in between Orchestrators

To connect Orchestrators to customer's infrastructure

3. What type of license is required for an MHO?

The MHO requires a NGTP license.

The MHO requires a VSX license.

The MHO does not require a license.

A license is needed for each attached SG

4. What Maestro component acts as a load balancer and network switch?

Security Switching Module (SSM)

Maestro Hyperscale Orchestrator (MHO)

Security Group (SG)

Security Gateway Module (SGM)

5. What is an uplink interface used for?

To connect in between appliances

To connect appliances to customer's infrastructure

To connect Orchestrators to customer's infrastructure

To connect in between Orchestrators

6. What is a security group?

A solution for Security Gateway redundancy and Load Sharing.

A set of appliances of the same model that are collectively managed by the MH

A set of network interfaces and individual SGMs assigned to a logical group.

A set of objects in SmartConsole that are responsible for enforcing an access policy.

7. What is the Orchestrator?

Network Switch

Manager of compute and network resources, load balancer and network switch

Load balancer

None of above

8. What is the Correction Layer?

Correction Layer is a daemon which corrects errors on Backplane interfaces

Correction Layer is a mechanism which handles asymmetric connections in multi-appliance system. For example, in case of NAT

Correction Layer is a mechanism which activated in case of asymmetric routing

Correction Layer is a Layer of GAIA OS which corrects misspelled commands and allows them to execute

9. What is the Correction Layer mechanism?

Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.

The load-balancing mechanism used by the MH

The MHO's distribution algorithm which determines the handling SGM for a given connection.

Enforces the access policy on the SGMs and synchronizes the enforcement verdict to other SGMs in the S

10. What is the maximum number of Appliances within Security group in Dual-Site configuration?

Page 2 of 3

11. At a minimum, how many management and Uplink ports does a SG require?

Only one of the two interfaces is needed for the Security Group.

Neither are required.

Two of each.

One each.

12. What is the maximum number of Appliances within the same Security Group?

13. For the MHO-175, which ports are Management ports?

Ports 49 - 55 are Management ports.

Ports 1 - 4 are Management ports.

Ports 27 - 47 are Management ports.

Ports 5 - 26 are Management ports.

14. What kinds of transceivers are supported on Orchestrator MHO-140?

SFP, QSFP, QSFP28

SFP+, SFP28, QSFP

SFP, SFP+, SFP28

SFP, SFP+, QSFP, QSFP28

15. What happens if the SMO Master fails?

The next SGM with the current lowest SGM ID assumes the role of the SMO Master.

The Backup SMO Master will take over in the event of a failure with the SMO Master.

A failover will occur on the MHO and traffic will continue to pass.

The Security Group will no longer pass traffic and the issue must be resolved with the SMO Master.

16. What does the lldpctl command do?

Show all devices discovered by LLDP protocol on downlink ports

Show all devices discovered by LLDP protocol on all ports

Discover orchestrators

Show all devices discovered by LLDP protocol on uplink ports

17. What type of cluster can a Security Group can be compared to?

Load Sharing Active / Active

VSLS

Active / Backup

Active / Standby

18. What kinds of transceivers are supported on Orchestrator MHO-170?

SFP, QSFP, QSFP28

SFP+, SFP28, QSFP

SFP, SFP+, SFP28

QSFP, QSFP28

19. There are two 10Gbps dual-port NICs and one 40Gbps NIC installed on a 23800 Appliance in slots 1, 2 and 3 accordingly.

Which interfaces should be connected to Orchestrator 1 for downlinks' intra-orchestrator redundancy when using two Orchestrators?

Port 1 in Slot 2 and Port 2 in Slot 1

This configuration is not supported

Any pair of available ports

Port 1 in Slot 1 and Port 2 in Slot 1

20. Which licenses should be issued for the Orchestrator?

No licenses are required for Orchestrator

Depends on Software Blades enabled on connected appliances

The Orchestrator is considered a Management server, hence it's licensed the same way

The Orchestrator requires NGTX license

Page 3 of 3

21. When security policy is installed

All SGMs receive the security policy and one by one performs an independent policy verification. Then, all SGMs simultaneously install the policy.

The SMO Master receives the policy and performs a policy verification the policy is installed on the SMO Master, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master, then the non-SMO Master SGMs install the policy.

All SGMs receive the security policy and simultaneous policy installation occurs.

The policy is installed on the SMO, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master and perform an independent policy verification, then the non-SMO Master SGMs install the policy.

22. What cannot be learned from the output of asg monitor command?

Uptime

Port status

Security Policy status

Appliances cluster status

23. Maestro allows running commands globally in Expert mode by using global prefixes, such as:

asg all

g_all

all

global

24. The ______________ command will allow users to update the specified file on all SGMs.

g_update_conf_file

g_all"

sed

g_cat

25. What happens when you make changes from Clish on the SMO Master?

The changes are synchronized to the SMS/MDS as a backup.

The changes are synchronized to the MHO as a backup.

Changes are only applied on the SMO Master.

Changes are applied to all members in the S

26. When working with Maestro, what is the difference between using Clish and gClish?

Clish commands are for testing purposes only and cannot be saved, gClish commands apply to all SG members, by default.

Clish commands apply to all UP SG members, by default. gClish commands apply to all SG members, by default.

Clish commands are run on the SG members. gClish commands are run on the MHO and applied to all connected SG members in a specified group.

Clish commands apply only to a specific SG member. gClish commands apply to all UP SG members, by default.

27. What cannot be learned from the output of lldpctl?

Serial number of Appliance

Appliance model

Distribution mode

Orchestrator's IP

28. What is the purpose of Management ports located on the Rear Panel of the Orchestrator MHO-140?

1Gbps connectivity for Security Groups

Reserved for internal purposes. Not in use.

Out-of-band interfaces for access to Orchestrator itself

Additional ports used as uplinks

29. What happens if you apply a hotfix using gClish?

If you apply a hotfix using gclish, it causes an outage for the entire SG as all members reboot at roughly the same time.

If you apply a hotfix using gclish, each SG members installs the hotfix and reboots after waiting it's turn to do so.

Logical groups "A" and "B" are created. Members of group "A" install and reboot first. Then members of group "B" does the same once reboots have finished with group "

If you apply a hotfix using gclish, the operation will fail because an outage would occur.

Check Point 156-836 CCME Exam Dumps

Check Point 156-836 CCME Exam Dumps

Share this post

Leave a Reply Cancel reply

Related Posts