CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-836

Free 156-836 Exam Braindumps (page: 9)

Page 8 of 24
PDF with 94 Questions

What happens if you apply a hotfix using gClish?

  1. If you apply a hotfix using gclish, it causes an outage for the entire SG as all members reboot at roughly the same time.
  2. If you apply a hotfix using gclish, each SG members installs the hotfix and reboots after waiting it's turn to do so.
  3. Logical groups "A" and "B" are created. Members of group "A" install and reboot first. Then members of group "B" does the same once reboots have finished with group "A."
  4. If you apply a hotfix using gclish, the operation will fail because an outage would occur.

Answer(s): B

Explanation:

According to the Installing and Uninstalling a Hotfix on Quantum Maestro Orchestrators, page 1, when you apply a hotfix using gclish, the MHO distributes the hotfix to all SGMs in the Security Group. The SGMs install the hotfix and reboot one by one, in ascending order of their SGM IDs. The SGMs wait for the previous SGM to finish rebooting before starting their own reboot. This ensures that there is no outage for the entire Security Group. Reference = Installing and Uninstalling a Hotfix on Quantum Maestro Orchestrators, page 1; Maestro R81.10 Jumbo Hotfix install - Check Point CheckMates, page 1.



What is the purpose of RJ-45 connectors located at the front panel of the Orchestrator MHO-170?

  1. Two Out-of-band interfaces for access to Orchestrator itself
  2. 1Gbps connectivity for Security Groups
  3. Out-of-band interface for access to Orchestrator itself and Serial Console connector
  4. Reserved for internal purposes. Not in use

Answer(s): C

Explanation:

The RJ-45 connectors located at the front panel of the Orchestrator MHO-170 are used for out-of- band management and serial console access. One of them is a 1Gbps RJ-45 port that provides an out- of-band interface for accessing the Orchestrator itself for configuration and management purposes. The other one is a RJ-45 serial console port that provides a command-line interface for initial setup and troubleshooting.


Reference:

- Maestro Hyperscale Orchestrator Datasheet - Check Point Software1, page 2 - Quantum Maestro Getting Started Guide - Check Point CheckMates, page 4



What does asg monitor command do?

  1. This command does not exist
  2. Monitor health status of entire system
  3. Monitor traffic on Appliances in Security Group
  4. Show real-time cluster status of Appliances in Security Group

Answer(s): D

Explanation:

The "asg monitor" command generally would show real-time cluster status of appliances in a security group, focusing on health and operational status.



What will happen in case of NAT of the traffic passing through Management network?

  1. This traffic will not pass correction, since it will be dropped
  2. Orchestrator will disable NAT and traffic will pass with no issue
  3. Since Management traffic is always going to SMO, it will take a care for Correction Layer and will re-distribute traffic to other Appliances
  4. This traffic will pass with no inspection

Answer(s): B

Explanation:

According to the Check Point MAESTRO R80.20SP Administration Manual1, NAT is not supported on the management network. If you configure NAT on the management network, the Orchestrator will disable NAT and allow the traffic to pass without translation. This is to ensure that the management traffic can reach the Security Group members and the SmartConsole without any issues.


Reference:

- Check Point MAESTRO R80.20SP Administration Manual, page 291






Post your Comments and Discuss Checkpoint 156-836 exam with other Community members:

156-836 Exam Discussions & Posts