CheckPoint 156-836 Online Practice Questions and Exam Preparation

CheckPoint 156-836 Online Questions & Answers

• Question 1:

  Multiple SGs can exist in a Dual Site environment. Each SG can be configured in one of three ways. Which is not one of those ways?

  A. Two MHOs connected to two MHOs via load balancers.
  B. Two MHOs at same site connected to remote site MHOs via two different switches.
  C. Two MHOs at same site connected to remote site MHOs via single switch.
  D. Direct connectivity between Remote Site MHOs.2
  A. Two MHOs connected to two MHOs via load balancers.

• Question 2:

  Which licenses should be issued for the Orchestrator?

  A. No licenses are required for Orchestrator
  B. Depends on Software Blades enabled on connected appliances
  C. The Orchestrator is considered a Management server, hence it's licensed the same way
  D. The Orchestrator requires NGTX license
  A. No licenses are required for Orchestrator

• Question 3:

  Do all MHOs need to be upgraded before starting the SGM upgrades?

  A. During the upgrade process all SGMs should be upgraded before upgrading all of the MHOs.
  B. A minimum of one of the MHOs should be upgraded before starting the SGM upgrades. However, there is no requirement to upgrade all the SGMs during the same maintenancewindow as the MHO
  C. All MHOs must first be upgraded before starting the SGM upgrades However, there is no requirement to upgrade all the SGMs during the same maintenance window as the MHOs.
  D. MHOs do not need to be upgraded at all because Maestro supports the use of different versions between the MHOs and SGMs.
  C. All MHOs must first be upgraded before starting the SGM upgrades However, there is no requirement to upgrade all the SGMs during the same maintenance window as the MHOs.

• Question 4:

  There are two 10Gbps dual-port NICs and one 40Gbps NIC installed on a 23800 Appliance in slots 1, 2 and 3 accordingly. Which interfaces should be connected to Orchestrator 1 for downlinks' intra-orchestrator redundancy when using two Orchestrators?

  A. Port 1 in Slot 2 and Port 2 in Slot 1
  B. This configuration is not supported
  C. Any pair of available ports
  D. Port 1 in Slot 1 and Port 2 in Slot 1
  D. Port 1 in Slot 1 and Port 2 in Slot 1

• Question 5:

  What type of license is required for an MHO?

  A. The MHO requires a NGTP license.
  B. The MHO requires a VSX license.
  C. The MHO does not require a license.
  D. A license is needed for each attached SGM.
  C. The MHO does not require a license.

• Question 6:

  What command will be used for updating fwkern.conf file on all Appliances within Security Group?

  A. vi
  B. g_all update_conf_file
  C. g_update_kernel
  D. g_update_conf_file
  D. g_update_conf_file

• Question 7:

  What is the purpose of RJ-45 connectors located at the front panel of the Orchestrator MHO-170?

  A. Two Out-of-band interfaces for access to Orchestrator itself
  B. 1Gbps connectivity for Security Groups
  C. Out-of-band interface for access to Orchestrator itself and Serial Console connector
  D. Reserved for internal purposes. Not in use
  C. Out-of-band interface for access to Orchestrator itself and Serial Console connector

• Question 8:

  What is the command 'asg diag' used for?

  A. Asg diag used for system diagnostics on Chassis only. It does not exist on Maestro
  B. Asg diag is used for system backup
  C. Asg diag is used for system diagnostics
  D. Asg diag is used for creating traffic flow diagrams
  C. Asg diag is used for system diagnostics

• Question 9:

  There is a Security group of 10 Appliances and all of them are up and running. How many Appliances within a Security Group keep the same connection in its connection table in case of NAT?

  A. Between 2 and 4
  B. All 10
  C. 2
  D. 3
  A. Between 2 and 4

• Question 10:

  What is the throughput penalty of Security Group?

  A. Depends on the type of Appliance
  B. 1% per member
  C. 10% per Security Group with no relation to the number of members
  D. 5% per member
  B. 1% per member