156-836 Real Exam Questions and Verified Answers

Question 1 Single choice

After you import the R81.10 software package, what do you use to verify that it is possible to upgrade an MHO or SG?

A
Run HCP. One of the tests will list upgrade eligibility status for the MHO or SG.
B
Run the Pre-Upgrade Verifier to make sure it is possible to upgrade
C
Nothing. CPUSE will run a verification during the upgrade process to ensure the package is compatible.
D
The package is verified during the import process and a warning or error will be displayed at that time.

Show answer and explanation

Correct answer: B

Question 2 Single choice

What is a security group?

A
A solution for Security Gateway redundancy and Load Sharing.
B
A set of appliances of the same model that are collectively managed by the MHO.
C
A set of network interfaces and individual SGMs assigned to a logical group.
D
A set of objects in SmartConsole that are responsible for enforcing an access policy.

Show answer and explanation

Correct answer: A

Question 3 Single choice

In what mode do MHOs process traffic?

A
MHOs process traffic in load sharing mode
B
MHOs process traffic in Active-Standby mode
C
MHOs process traffic in Active-Active mode
D
MHOs process traffic in VSLS mode

Show answer and explanation

Correct answer: C

Question 4 Single choice

The ______________ command will allow users to update the specified file on all SGMs.

A
g_update_conf_file
B
g_all"
C
sed
D
g_cat

Show answer and explanation

Correct answer: A

Question 5 Single choice

Logs without a dedicated log file can be found in

A
/var/log/junk.log.dbg
B
/var/log/messages
C
$RTDIR/log/junk.log
D
$FWDIR/log/fw.log

Show answer and explanation

Correct answer: B

Question 6 Single choice

What will happen in case of NAT of the traffic passing through Management network?

A
This traffic will not pass correction, since it will be dropped
B
Orchestrator will disable NAT and traffic will pass with no issue
C
Since Management traffic is always going to SMO, it will take a care for Correction Layer and will re-distribute traffic to other Appliances
D
This traffic will pass with no inspection

Show answer and explanation

Correct answer: B

Question 7 Single choice

What is the difference between Dual-Site and Dual-Room?

A
Dual-Room is a kind of Dual-Site deployment within the same building
B
Dual-Room is Active / Standby and Dual-Site is Active / Active
C
Dual-Room is a Single-Site deployment where all Appliances are connected to both orchestrators
D
They are the same

Show answer and explanation

Correct answer: A

Question 8 Single choice

What is the default Distribution mode?

A
Auto-topology
B
User
C
Manual-General
D
Network

Show answer and explanation

Correct answer: A

Question 9 Single choice

Multiple SGs can exist in a Dual Site environment. Each SG can be configured in one of three ways.

Which is not one of those ways?

A
Two MHOs connected to two MHOs via load balancers.
B
Two MHOs at same site connected to remote site MHOs via two different switches.
C
Two MHOs at same site connected to remote site MHOs via single switch.
D
Direct connectivity between Remote Site MHOs.2

Show answer and explanation

Correct answer: A

Question 10 Single choice

When security policy is installed

A
All SGMs receive the security policy and one by one performs an independent policy verification. Then, all SGMs simultaneously install the policy.
B
The SMO Master receives the policy and performs a policy verification the policy is installed on the SMO Master, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master, then the non-SMO Master SGMs install the policy.
C
All SGMs receive the security policy and simultaneous policy installation occurs.
D
The policy is installed on the SMO, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master and perform an independent policy verification, then the non-SMO Master SGMs install the policy.

Show answer and explanation

Correct answer: B