What does asg monitor command do?
Answer(s): D
The "asg monitor" command generally would show real-time cluster status of appliances in a security group, focusing on health and operational status.
What will happen in case of NAT of the traffic passing through Management network?
Answer(s): B
According to the Check Point MAESTRO R80.20SP Administration Manual1, NAT is not supported on the management network. If you configure NAT on the management network, the Orchestrator will disable NAT and allow the traffic to pass without translation. This is to ensure that the management traffic can reach the Security Group members and the SmartConsole without any issues.
- Check Point MAESTRO R80.20SP Administration Manual, page 291
Which distribution mode assigns packets to an SGM based solely on the packet destination IP?
Answer(s): C
Network mode is the distribution mode that assigns packets to an SGM based solely on the packet destination IP. In this mode, the Orchestrator uses a hash function to map each destination IP to a specific SGM. This mode ensures that all packets with the same destination IP are processed by the same SGM, regardless of the source IP or port. This mode is suitable for scenarios where the destination IP is the main factor for load balancing, such as NAT or VPN.
- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.4: Traffic Flow, page 2-19- Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section:Traffic Distribution, page 2-7- Maestro basic setup documentation - Page 2 - Check Point CheckMates
When a VPN tunnel is formed with a Maestro SGM,
What is the default Distribution mode?
Answer(s): A
Auto-topology is the default distribution mode for Maestro Security Groups. In this mode, the Orchestrator assigns packets to a Security Group Member based on the topology of the port defined in the gateway object. Each port is either in user mode or network mode depending on the topology. User mode means that the port is connected to the internal network and network mode means that the port is connected to the external network. The Orchestrator uses a hash function to map each source IP or destination IP to a specific SGM, depending on the mode of the port. This mode ensures that all packets with the same source IP or destination IP are processed by the same SGM, regardless of the port or protocol.
- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.4: Traffic Flow, page 2-18- Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section:Traffic Distribution, page 2-7- Lari Luoma | Lead Consultant | Maestro SME | Check Point Evangelist1, slide 16
Post your Comments and Discuss Checkpoint 156-836 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 156-836 content, but please register or login to continue.