QUESTION: 41

While looking at your system's correction statistics, you notice you have a correction rate approaching 100 percent. Is this a problem?

A correction rate above 90 percent indicates a need to disable Layer 4 Distribution.
A correction rate approaching 100 percent of all connections is unusual. This is a cause for concern because the SGMs may fail to process traffic.
If correction rates are higher than 80 percent, latency is expected.
In some scenarios, a correction rate approaching 100 percent of all connections is not unusual.
This is not usually a cause for concern as the correction mechanism is fast and efficient.

Answer(s): D

Explanation:

The correction rate is the percentage of connections that require correction by the correction layer, which is a mechanism that ensures that the traffic is processed by the correct SGM in the Security Group. The correction rate depends on the distribution mode (Layer 3 or Layer 4) and the traffic pattern. In some scenarios, such as when the traffic is asymmetric or when the distribution mode is Layer 4, the correction rate can approach 100 percent of all connections. This is not a problem, as the correction layer is designed to handle such situations without affecting the performance or availability of the Security Group1.
Reference = Maestro Expert (CCME) Course - Check Point Software, page 16.

Reveal Solution Next Question

QUESTION: 42

There is a Security group of 10 Appliances and all of them are up and running. How many Appliances within a Security Group keep the same connection in its connection table in case of NAT?

Between 2 and 4
All 10
2
3

Answer(s): A

Reference:

- Check Point Maestro R81.X Administration Guide, page 64, section "Correction Layer" 1 - Check Point Maestro R81.X Getting Started Guide, page 26, section "Correction Layer" 2 - Check Point Maestro Under the Hood presentation by Lari Luoma, slide 23 - Check Point Maestro Frequently Asked Questions (FAQ), question 9
1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarte d/html_frameset.htm :
https://community.checkpoint.com/fyrhh23835/attachments/fyrhh23835/maestro/1191/1/Check%2 0Mates%20Maestro%20under%20the%20hood%202022.pptx :
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails =&solutionid=sk147853&partition=Basic&product=Maestro

Reveal Solution Next Question

QUESTION: 43

Which command do you use to find bottlenecks in the system that are affecting performance, even functionality in some cases?

asg stat -v
asg diag verify
asg perf -v
asg monitor

Answer(s): C

Explanation:

The asg perf -v command is used to find bottlenecks in the system that are affecting performance,

even functionality in some cases. The asg perf -v command displays the performance statistics of the Security Group Modules (SGMs) in the Security Group, such as throughput, packet rate, CPU utilization, memory usage, and more. The asg perf -v command also shows the distribution mode and the correction rate of each SGM, which can indicate potential issues with asymmetric routing or load balancing. The asg perf -v command can help identify which SGMs are overloaded, underutilized, or misconfigured, and provide insights for troubleshooting and optimization.

Reference:

- Check Point Maestro R81.X Administration Guide, page 67, section "asg perf" 1 - Check Point Maestro R81.X Getting Started Guide, page 29, section "asg perf" 2 - Check Point Maestro Under the Hood presentation by Lari Luoma, slide 26
1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarte d/html_frameset.htm :
https://community.checkpoint.com/fyrhh23835/attachments/fyrhh23835/maestro/1191/1/Check%2 0Mates%20Maestro%20under%20the%20hood%202022.pptx

Reveal Solution Next Question

QUESTION: 44

What is the command 'asg diag' used for?

Asg diag used for system diagnostics on Chassis only. It does not exist on Maestro
Asg diag is used for system backup
Asg diag is used for system diagnostics
Asg diag is used for creating traffic flow diagrams

Answer(s): C

Explanation:

The asg diag command is used for system diagnostics on both Maestro and Chassis systems. The asg diag command can perform various tests and checks on the system components, such as hardware, software, network, clock, ARP, and more. The asg diag command can help identify and troubleshoot any issues or errors that may affect the system functionality or performance.

Reference:

- Check Point Maestro R81.X Administration Guide, page 66, section "asg diag" 1 - Check Point Maestro R81.X Getting Started Guide, page 28, section "asg diag" 2 - Check Point Maestro Under the Hood presentation by Lari Luoma, slide 25
1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarte d/html_frameset.htm :
https://community.checkpoint.com/fyrhh23835/attachments/fyrhh23835/maestro/1191/1/Check%2 0Mates%20Maestro%20under%20the%20hood%202022.pptx

Reveal Solution Next Question

Free 156-836 Exam Braindumps (page: 11)

QUESTION: 41

Explanation:

QUESTION: 42

Reference:

QUESTION: 43

Explanation:

Reference:

QUESTION: 44

Explanation:

Reference: