CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-836

Free 156-836 Exam Braindumps (page: 4)

Page 3 of 24
PDF with 94 Questions

What is the Correction Layer mechanism?

  1. Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.
  2. The load-balancing mechanism used by the MHO.
  3. The MHO's distribution algorithm which determines the handling SGM for a given connection.
  4. Enforces the access policy on the SGMs and synchronizes the enforcement verdict to other SGMs in the SG.

Answer(s): A

Explanation:

The Correction Layer mechanism is a Maestro component that ensures that packets from the same connection are handled by the same Security Group Module (SGM) in a multi-appliance system. This is especially important when NAT or VPNs are involved, as packets sent from the client to the server can be distributed to a different SGM than packets from the same session sent from the server to the client. The Correction Layer must then forward the packet to the correct SGM.


Reference:

- NAT and the Correction Layer on a VSX Gateway - Check Point Software1
- Solved: Maestro queries - Check Point CheckMates



What is the maximum number of Appliances within Security group in Dual-Site configuration?

  1. 28
  2. 31
  3. 15
  4. 16

Answer(s): A



At a minimum, how many management and Uplink ports does a SG require?

  1. Only one of the two interfaces is needed for the Security Group.
  2. Neither are required.
  3. Two of each.
  4. One each.

Answer(s): D

Explanation:

A Security Group (SG) requires at least one management port and one uplink port to function properly. The management port is used to connect the SG to the Maestro Hyperscale Orchestrator (MHO) and the customer's management infrastructure, such as SmartConsole or SmartDomain Manager. The uplink port is used to connect the SG to the customer's network infrastructure, such as switches, routers, or firewalls. The uplink port is also used to send and receive traffic from the customer's network to the SG.


Reference:

- Maestro Expert (CCME) Course - Check Point Software, page 41 - Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline



What is the maximum number of Appliances within the same Security Group?

  1. 31
  2. 8
  3. 52
  4. 16

Answer(s): A

Explanation:

The maximum number of appliances within the same security group is 31. This is because a security group can have up to 31 Security Group Modules (SGMs) of the same or different models, and each SGM is an appliance that runs the Check Point software. A security group can span across multiple chassis, and each chassis can have up to 16 SGMs. However, the total number of SGMs in a security group cannot exceed 31.


Reference:

- Maestro Expert (CCME) Course - Check Point Software, page 51 - Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline






Post your Comments and Discuss Checkpoint 156-836 exam with other Community members:

156-836 Exam Discussions & Posts