Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-836

Checkpoint 156-836 Exam Questions
Check Point Certified Maestro Expert - R81.X (Page 6 )

Updated On: 19-Feb-2026
Page 4 of 20
PDF with 94 Questions

At a minimum, how many management and Uplink ports does a SG require?

  1. Only one of the two interfaces is needed for the Security Group.
  2. Neither are required.
  3. Two of each.
  4. One each.

Answer(s): D

Explanation:

A Security Group (SG) requires at least one management port and one uplink port to function properly. The management port is used to connect the SG to the Maestro Hyperscale Orchestrator (MHO) and the customer's management infrastructure, such as SmartConsole or SmartDomain Manager. The uplink port is used to connect the SG to the customer's network infrastructure, such as switches, routers, or firewalls. The uplink port is also used to send and receive traffic from the customer's network to the SG.


Reference:

- Maestro Expert (CCME) Course - Check Point Software, page 41 - Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline



What is the maximum number of Appliances within the same Security Group?

  1. 31
  2. 8
  3. 52
  4. 16

Answer(s): A

Explanation:

The maximum number of appliances within the same security group is 31. This is because a security group can have up to 31 Security Group Modules (SGMs) of the same or different models, and each SGM is an appliance that runs the Check Point software. A security group can span across multiple chassis, and each chassis can have up to 16 SGMs. However, the total number of SGMs in a security group cannot exceed 31.


Reference:

- Maestro Expert (CCME) Course - Check Point Software, page 51 - Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline



For the MHO-175, which ports are Management ports?

  1. Ports 49 - 55 are Management ports.
  2. Ports 1 - 4 are Management ports.
  3. Ports 27 - 47 are Management ports.
  4. Ports 5 - 26 are Management ports.

Answer(s): B

Explanation:

According to the Port Mapping for the Check Point Maestro HyperScale Orchestrator MHO-175 document1, ports 1 - 4 are Management ports that are used to connect the MHO to the customer's management infrastructure, such as SmartConsole or SmartDomain Manager. Ports 5 - 26 are Uplink ports that are used to connect the MHO to the customer's network infrastructure, such as switches,

routers, or firewalls. Ports 27 - 47 are Downlink ports that are used to connect the MHO to the Security Group Modules (SGMs) in the Security Group. Ports 49 - 55 are Backplane ports that are used to connect the MHO to another MHO in a Dual Orchestrator environment.


Reference:

- Maestro Expert (CCME) Course - Check Point Software, page 42 - Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline3 - Port Mapping for the Check Point Maestro HyperScale Orchestrator MHO-1751



What kinds of transceivers are supported on Orchestrator MHO-140?

  1. SFP, QSFP, QSFP28
  2. SFP+, SFP28, QSFP
  3. SFP, SFP+, SFP28
  4. SFP, SFP+, QSFP, QSFP28

Answer(s): C

Explanation:

According to the Maestro Hyperscale Orchestrator Datasheet1, the Orchestrator MHO-140 supports the following transceiver types: SFP, SFP+, SFP28. These transceivers can be used for the management, uplink, and downlink ports of the Orchestrator. The SFP transceivers support 1 GbE, the SFP+ transceivers support 10 GbE, and the SFP28 transceivers support 25 GbE.


Reference:

- Maestro Expert (CCME) Course - Check Point Software, page 42 - Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline3 - Maestro Hyperscale Orchestrator Datasheet - Check Point Software, page 2



What happens if the SMO Master fails?

  1. The next SGM with the current lowest SGM ID assumes the role of the SMO Master.
  2. The Backup SMO Master will take over in the event of a failure with the SMO Master.
  3. A failover will occur on the MHO and traffic will continue to pass.
  4. The Security Group will no longer pass traffic and the issue must be resolved with the SMO Master.

Answer(s): B

Explanation:

The SMO Master is the SGM that is responsible for managing the Security Group and communicating with the MHO. If the SMO Master fails, the Backup SMO Master, which is the SGM with the next lowest SGM ID, will take over the role of the SMO Master and ensure the continuity of the Security Group operations.
Reference = Maestro Expert (CCME) Course - Check Point Software, page 14; Check Point Accredited Maestro Expert - New exam a... - Check Point CheckMates, page 1.






Post your Comments and Discuss Checkpoint 156-836 exam dumps with other Community members:

Join the 156-836 Discussion