When security policy is installed
Answer(s): B
This is the correct answer because it describes the security policy installation flow for a Maestro Security Group. The SMO Master is the Security Group Member that acts as the leader and the single point of contact for the Management Server. The SMO Master verifies the policy and installs it first, then notifies the other SGMs that a new policy is available. The other SGMs fetch the policy from the SMO Master and install it in parallel.
- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.3: Security Policy Installation, page 2-15 - Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section:Security Policy Installation, page 2-13- Policy installation flow - Check Point Software
What cannot be learned from the output of asg monitor command?
Answer(s): D
Maestro allows running commands globally in Expert mode by using global prefixes, such as:
The g_all prefix is used to run commands globally in Expert mode on all Security Group Members of the current Security Group. For example, g_all cpstop will stop the Check Point services on all SGMs.The other prefixes are not valid for global commands in Expert mode.
- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.3: Global Commands, page 4-11 - Check Point R81 Maestro Administration Guide, Chapter 4: Using the Command Line Interface and WebUI, Section: Global Commands, page 4-9 - Global Expert Mode Commands - Check Point CheckMates
The ______________ command will allow users to update the specified file on all SGMs.
Answer(s): A
The g_update_conf_file command is a global command that allows users to update the specified file on all Security Group Members of the current Security Group. The command takes the file name and the parameter-value pair as arguments and updates the file accordingly. For example, g_update_conf_file fwkern.conf fwha_enable_arp=1 will add or modify the fwha_enable_arp parameter in the fwkern.conf file on all SGMs.
- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.3: Global Commands, page 4-12 - Check Point R81 Maestro Administration Guide, Chapter 4: Using the Command Line Interface and WebUI, Section: Global Commands, page 4-10 - Maestro Commands for Security Groups - Check Point CheckMates
What happens when you make changes from Clish on the SMO Master?
Answer(s): C
- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.2: Security Group Configuration, page 2-10 - Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section:Security Group Configuration, page 2-9- Security Group Configuration - Check Point Software
Post your Comments and Discuss Checkpoint 156-836 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 156-836 content, but please register or login to continue.