CheckPoint 156-836 Online Practice Questions and Exam Preparation

CheckPoint 156-836 Online Questions & Answers

• Question 1:

  What happens when you make changes from Clish on the SMO Master?

  A. The changes are synchronized to the SMS/MDS as a backup.
  B. The changes are synchronized to the MHO as a backup.
  C. Changes are only applied on the SMO Master.
  D. Changes are applied to all members in the SG.
  C. Changes are only applied on the SMO Master.

• Question 2:

  What is the purpose of g_tcpdump command?

  A. Collects traffic dump from all Active Appliances within Security Group
  B. Collects traffic dump from CIN network
  C. Collects traffic dump from Sync network
  D. The same as tcpdump, just on Scalable Platform
  A. Collects traffic dump from all Active Appliances within Security Group

• Question 3:

  What type of license is required for an MHO?

  A. The MHO requires a NGTP license.
  B. The MHO requires a VSX license.
  C. The MHO does not require a license.
  D. A license is needed for each attached SGM.
  C. The MHO does not require a license.

• Question 4:

  In what mode do MHOs process traffic?

  A. MHOs process traffic in load sharing mode
  B. MHOs process traffic in Active-Standby mode
  C. MHOs process traffic in Active-Active mode
  D. MHOs process traffic in VSLS mode
  C. MHOs process traffic in Active-Active mode

• Question 5:

  During an upgrade, Is Multi-Version Clustering (MVC) supported?

  A. No. Maestro does not support MVC because ClusterXL is disabled during an upgrade.
  B. No, Maestro does not support MVC.
  C. Maestro supports MVC or full connectivity upgrade as of R80.40.
  D. Yes, MVC is supported as of R81 for Maestro.
  C. Maestro supports MVC or full connectivity upgrade as of R80.40.

• Question 6:

  Which blade configuration files should be backed up on the SG if upgrading from R80.30SP or earlier?

  A. IPS configuration files
  B. fwkern.conf files.
  C. VPN configuration files
  D. Mobile Access configuration files.
  B. fwkern.conf files.

• Question 7:

  In a dual MHO environment, MHO1 and MHO2 are connected to the SGM line cards in which way?

  A. MHO1 and MHO2 are connected to the SGMs using the Sync cable.
  B. MHO1 and MHO2 are connected to the line cards in any order administrators see fit.
  C. MHO 1 is connected to the even-numbered ports, while MHO2 is connected to odd- numbered ports.
  D. MHO 1 is connected to the odd-numbered ports, while MHO2 is connected to even- numbered ports.
  C. MHO 1 is connected to the even-numbered ports, while MHO2 is connected to odd- numbered ports.

• Question 8:

  What is the purpose of Management ports located on the Rear Panel of the Orchestrator MHO-140?

  A. 1Gbps connectivity for Security Groups
  B. Reserved for internal purposes. Not in use.
  C. Out-of-band interfaces for access to Orchestrator itself
  D. Additional ports used as uplinks
  C. Out-of-band interfaces for access to Orchestrator itself

• Question 9:

  Possibilities for a failure in a single SGM of a Security Group include.

  A. A change was made with clish instead of gClish, causing the SGM to handle traffic differently than the other SGMs.
  B. SecureXL is not enabled on the SGM.
  C. An administrator imported a hotfix into the CPUSE repository of a single SGM.
  D. There are too many active SGMs in the SG.
  C. An administrator imported a hotfix into the CPUSE repository of a single SGM.

• Question 10:

  After you import the R81.10 software package, what do you use to verify that it is possible to upgrade an MHO or SG?

  A. Run HCP. One of the tests will list upgrade eligibility status for the MHO or SG.
  B. Run the Pre-Upgrade Verifier to make sure it is possible to upgrade
  C. Nothing. CPUSE will run a verification during the upgrade process to ensure the package is compatible.
  D. The package is verified during the import process and a warning or error will be displayed at that time.
  B. Run the Pre-Upgrade Verifier to make sure it is possible to upgrade