Free 156-836 Exam Braindumps
Check Point Certified Maestro Expert - R81.X Questions 26–30 (page: 7)

Updated On: 10-Feb-2026

When working with Maestro, what is the difference between using Clish and gClish?

  1. Clish commands are for testing purposes only and cannot be saved, gClish commands apply to all SG members, by default.
  2. Clish commands apply to all UP SG members, by default. gClish commands apply to all SG members, by default.
  3. Clish commands are run on the SG members. gClish commands are run on the MHO and applied to all connected SG members in a specified group.
  4. Clish commands apply only to a specific SG member. gClish commands apply to all UP SG members, by default.

Answer(s): C



What cannot be learned from the output of lldpctl?

  1. Serial number of Appliance
  2. Appliance model
  3. Distribution mode
  4. Orchestrator's IP

Answer(s): C

Explanation:

The lldpctl command is a tool to display information about the devices discovered by the Link Layer Discovery Protocol (LLDP) on all ports of the Maestro Orchestrator and the Security Group Members. LLDP is a protocol that enables devices to exchange information about their identity, capabilities, and configuration. LLDP can help to discover the topology and connectivity of the Maestro environment.

The output of lldpctl can show the serial number, appliance model, and orchestrator's IP of the connected devices, but it cannot show the distribution mode of the Security Group. The distribution mode is the algorithm that determines how the Maestro Orchestrator distributes the traffic among the Security Group Members. To view the distribution mode, other commands such as asg monitor or asg stat can be used.


Reference:

- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.2: LLDP, page 4-9 - Check Point R81 Maestro Administration Guide, Chapter 3: Working with Security Group Modules, Section: LLDP, page 3-9
- Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section:
Traffic Distribution, page 2-7
- Maestro basic setup documentation - Page 2 - Check Point CheckMates - Log and Configuration Files - Check Point Software



What is the purpose of Management ports located on the Rear Panel of the Orchestrator MHO-140?

  1. 1Gbps connectivity for Security Groups
  2. Reserved for internal purposes. Not in use.
  3. Out-of-band interfaces for access to Orchestrator itself
  4. Additional ports used as uplinks

Answer(s): C

Explanation:

The Management ports located on the Rear Panel of the Orchestrator MHO-140 are out-of-band interfaces that provide access to the Orchestrator itself for configuration and management purposes. They are not used for traffic distribution or connectivity to the Security Groups or the external networks. They are 1Gbps RJ-45 ports that can be connected to a switch or a router.


Reference:

- Maestro Hyperscale Orchestrator Datasheet - Check Point Software1, page 2 - Quantum Maestro Getting Started Guide - Check Point CheckMates2, page 4



What happens if you apply a hotfix using gClish?

  1. If you apply a hotfix using gclish, it causes an outage for the entire SG as all members reboot at roughly the same time.
  2. If you apply a hotfix using gclish, each SG members installs the hotfix and reboots after waiting it's turn to do so.
  3. Logical groups "A" and "B" are created. Members of group "A" install and reboot first. Then members of group "B" does the same once reboots have finished with group "A."
  4. If you apply a hotfix using gclish, the operation will fail because an outage would occur.

Answer(s): B

Explanation:

According to the Installing and Uninstalling a Hotfix on Quantum Maestro Orchestrators, page 1, when you apply a hotfix using gclish, the MHO distributes the hotfix to all SGMs in the Security Group. The SGMs install the hotfix and reboot one by one, in ascending order of their SGM IDs. The SGMs wait for the previous SGM to finish rebooting before starting their own reboot. This ensures that there is no outage for the entire Security Group. Reference = Installing and Uninstalling a Hotfix on Quantum Maestro Orchestrators, page 1; Maestro R81.10 Jumbo Hotfix install - Check Point CheckMates, page 1.



What is the purpose of RJ-45 connectors located at the front panel of the Orchestrator MHO-170?

  1. Two Out-of-band interfaces for access to Orchestrator itself
  2. 1Gbps connectivity for Security Groups
  3. Out-of-band interface for access to Orchestrator itself and Serial Console connector
  4. Reserved for internal purposes. Not in use

Answer(s): C

Explanation:

The RJ-45 connectors located at the front panel of the Orchestrator MHO-170 are used for out-of- band management and serial console access. One of them is a 1Gbps RJ-45 port that provides an out- of-band interface for accessing the Orchestrator itself for configuration and management purposes. The other one is a RJ-45 serial console port that provides a command-line interface for initial setup and troubleshooting.


Reference:

- Maestro Hyperscale Orchestrator Datasheet - Check Point Software1, page 2 - Quantum Maestro Getting Started Guide - Check Point CheckMates, page 4



Viewing page 7 of 20
Viewing questions 31 - 35 out of 94 questions


Post your Comments and Discuss Checkpoint 156-836 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!