Free 156-836 Exam Braindumps (page: 8)

Page 7 of 24

What happens when you make changes from Clish on the SMO Master?

  1. The changes are synchronized to the SMS/MDS as a backup.
  2. The changes are synchronized to the MHO as a backup.
  3. Changes are only applied on the SMO Master.
  4. Changes are applied to all members in the SG.

Answer(s): C


Reference:

- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.2: Security Group Configuration, page 2-10 - Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section:
Security Group Configuration, page 2-9

- Security Group Configuration - Check Point Software



When working with Maestro, what is the difference between using Clish and gClish?

  1. Clish commands are for testing purposes only and cannot be saved, gClish commands apply to all SG members, by default.
  2. Clish commands apply to all UP SG members, by default. gClish commands apply to all SG members, by default.
  3. Clish commands are run on the SG members. gClish commands are run on the MHO and applied to all connected SG members in a specified group.
  4. Clish commands apply only to a specific SG member. gClish commands apply to all UP SG members, by default.

Answer(s): C



What cannot be learned from the output of lldpctl?

  1. Serial number of Appliance
  2. Appliance model
  3. Distribution mode
  4. Orchestrator's IP

Answer(s): C

Explanation:

The lldpctl command is a tool to display information about the devices discovered by the Link Layer Discovery Protocol (LLDP) on all ports of the Maestro Orchestrator and the Security Group Members. LLDP is a protocol that enables devices to exchange information about their identity, capabilities, and configuration. LLDP can help to discover the topology and connectivity of the Maestro environment.

The output of lldpctl can show the serial number, appliance model, and orchestrator's IP of the connected devices, but it cannot show the distribution mode of the Security Group. The distribution mode is the algorithm that determines how the Maestro Orchestrator distributes the traffic among the Security Group Members. To view the distribution mode, other commands such as asg monitor or asg stat can be used.


Reference:

- Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.2: LLDP, page 4-9 - Check Point R81 Maestro Administration Guide, Chapter 3: Working with Security Group Modules, Section: LLDP, page 3-9
- Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section:
Traffic Distribution, page 2-7
- Maestro basic setup documentation - Page 2 - Check Point CheckMates - Log and Configuration Files - Check Point Software



What is the purpose of Management ports located on the Rear Panel of the Orchestrator MHO-140?

  1. 1Gbps connectivity for Security Groups
  2. Reserved for internal purposes. Not in use.
  3. Out-of-band interfaces for access to Orchestrator itself
  4. Additional ports used as uplinks

Answer(s): C

Explanation:

The Management ports located on the Rear Panel of the Orchestrator MHO-140 are out-of-band interfaces that provide access to the Orchestrator itself for configuration and management purposes. They are not used for traffic distribution or connectivity to the Security Groups or the external networks. They are 1Gbps RJ-45 ports that can be connected to a switch or a router.


Reference:

- Maestro Hyperscale Orchestrator Datasheet - Check Point Software1, page 2 - Quantum Maestro Getting Started Guide - Check Point CheckMates2, page 4






Post your Comments and Discuss Checkpoint 156-836 exam with other Community members:

156-836 Exam Discussions & Posts