Free Practice Questions for Check Point 156-836 Exam

Question 1

What cannot be learned from the output of asg monitor command?

AUptime

BPort status

CSecurity Policy status

DAppliances cluster status

Correct Answer: D. Appliances cluster status

Question 2

During an upgrade, Is Multi-Version Clustering (MVC) supported?

ANo. Maestro does not support MVC because ClusterXL is disabled during an upgrade.

BNo, Maestro does not support MVC.

CMaestro supports MVC or full connectivity upgrade as of R80.40.

DYes, MVC is supported as of R81 for Maestro.

Correct Answer: C. Maestro supports MVC or full connectivity upgrade as of R80.40.

Question 3

When security policy is installed

AAll SGMs receive the security policy and one by one performs an independent policy verification. Then, all SGMs simultaneously install the policy.

BThe SMO Master receives the policy and performs a policy verification the policy is installed on the SMO Master, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master, then the non-SMO Master SGMs install the policy.

CAll SGMs receive the security policy and simultaneous policy installation occurs.

DThe policy is installed on the SMO, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master and perform an independent policy verification, then the non-SMO Master SGMs install the policy.

Correct Answer: B. The SMO Master receives the policy and performs a policy verification the policy is installed on the SMO Master, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master, then the non-SMO Master SGMs install the policy.

Question 4

What Maestro component acts as a load balancer and network switch?

ASecurity Switching Module (SSM)

BMaestro Hyperscale Orchestrator (MHO)

CSecurity Group (SG)

DSecurity Gateway Module (SGM)

Correct Answer: B. Maestro Hyperscale Orchestrator (MHO)

Question 5

Multiple SGs can exist in a Dual Site environment. Each SG can be configured in one of three ways. Which is not one of those ways?

ATwo MHOs connected to two MHOs via load balancers.

BTwo MHOs at same site connected to remote site MHOs via two different switches.

CTwo MHOs at same site connected to remote site MHOs via single switch.

DDirect connectivity between Remote Site MHOs.2

Correct Answer: A. Two MHOs connected to two MHOs via load balancers.

Question 6

What command can be run to show which SGM is selected to receive traffic?

Ag_tcpdump

Basg monitor

Cdxl calc

Dasg calc

Correct Answer: D. asg calc

Question 7

What is the Orchestrator?

ANetwork Switch

BManager of compute and network resources, load balancer and network switch

CLoad balancer

DNone of above

Correct Answer: B. Manager of compute and network resources, load balancer and network switch

Question 8

Splitter cannot be used _______

ATo connect single port on orchestrator to the same Appliance

BTo connect single port on orchestrator to multiple port on external switch

CTo connect single port on Appliance to multiple ports on the orchestrator

DTo connect single port on orchestrator to multiple Appliances

Correct Answer: A. To connect single port on orchestrator to the same Appliance

Question 9

Complete the sentence: Dual Orchestrators work as.______

ALoad Sharing cluster

BActive-Active cluster

CActive - Standby cluster

DHot-Swap RAID

Correct Answer: B. Active-Active cluster

Question 10

At a minimum, how many management and Uplink ports does a SG require?

AOnly one of the two interfaces is needed for the Security Group.

BNeither are required.

CTwo of each.

DOne each.

Correct Answer: D. One each.