CheckPoint 156-836 Online Practice Questions and Exam Preparation

CheckPoint 156-836 Online Questions & Answers

• Question 21:

  Layer 4 distribution is enabled by default in Maestro. Which is not a scenario when you would want to leave this enabled?

  A. When there is a large number of source ports in use by protocols such as HTTP, HTTPS, and DNS.
  B. When dynamic routing protocols, such as BGP or OSPF are used.
  C. When there is a heavy imbalance of traffic between the SGMs that are members of the same SG.
  D. When the SG is NATing a very high percentage of traffic passing through it.
  B. When dynamic routing protocols, such as BGP or OSPF are used.

• Question 22:

  The ______________ command will allow users to update the specified file on all SGMs.

  A. g_update_conf_file
  B. g_all"
  C. sed
  D. g_cat
  A. g_update_conf_file

• Question 23:

  What is the difference between Dual-Site and Dual-Room?

  A. Dual-Room is a kind of Dual-Site deployment within the same building
  B. Dual-Room is Active / Standby and Dual-Site is Active / Active
  C. Dual-Room is a Single-Site deployment where all Appliances are connected to both orchestrators
  D. They are the same
  A. Dual-Room is a kind of Dual-Site deployment within the same building

• Question 24:

  What is the Orchestrator?

  A. Network Switch
  B. Manager of compute and network resources, load balancer and network switch
  C. Load balancer
  D. None of above
  B. Manager of compute and network resources, load balancer and network switch

• Question 25:

  What is the purpose of interface bonding?

  A. A bond interface can be configured for high availability redundancy.
  B. A bond interface is used for passing synchronization traffic between the SGMs.
  C. For load sharing which increases connection throughput above that which is possible using one physical interface.
  D. A bond interface can be configured for high availability redundancy or for load sharing which increases connection throughput above that which is possible using one physical interface.
  D. A bond interface can be configured for high availability redundancy or for load sharing which increases connection throughput above that which is possible using one physical interface.

• Question 26:

  When a VPN tunnel is formed with a Maestro SGM,

  A. The receiving SGM makes an encryption decision. The SGM then syncs the traffic to two backup SGMs: one for clear traffic and one for encrypted traffic.
  B. SGM 1 analyzes the policy and topology. If encryption is required, it calculates the tunnel owner's IP address. SGM 1 sends a clear packet to the tunnel owner. SGM 2 is now the connection and tunnel owner.
  C. The MHO handles the IKE before distributing the traffic to a SGM to handle all encrypted traffic. This helps to prevent any issues with the correction layer.
  D. The MHO distributes copies of the packets to two different SGMs because SGM 1 will handle the clear traffic IKE exchange packets, while SGM2 handles encrypted packets.
  B. SGM 1 analyzes the policy and topology. If encryption is required, it calculates the tunnel owner's IP address. SGM 1 sends a clear packet to the tunnel owner. SGM 2 is now the connection and tunnel owner.

• Question 27:

  What is HealthCheck Point?

  A. Is a self-updatable suite of tools for MHOs with the capability to assess the health of the system and provide a timeline of critical and informative events that might have occurred in a production system.
  B. Performs a system health check and is meant to replace both a CPInfo and the health check script.
  C. Can be used to let you visualize the Firewall topology for the SG and view live statistics, which includes throughput, problem notes, and CPU utilization.
  D. Is a self-updatable suite of tools for SGMs with the capability to assess the health of the system, visualize the Firewall topology, provide a timeline of critical and informative events that might have occurred in a production system.
  B. Performs a system health check and is meant to replace both a CPInfo and the health check script.

• Question 28:

  At a minimum, how many management and Uplink ports does a SG require?

  A. Only one of the two interfaces is needed for the Security Group.
  B. Neither are required.
  C. Two of each.
  D. One each.
  D. One each.

• Question 29:

  There are two appliances within the same Security Group. One of them is connected by One downlink only, another one by Two downlinks. Assuming there's no NAT and no VPN, what would be proportion of traffic distribution done by Orchestrator?

  A. 100%/0%
  B. 33%/66%
  C. 50%/50%
  D. 66%/33%
  B. 33%/66%

• Question 30:

  What kinds of transceivers are supported on Orchestrator MHO-140?

  A. SFP, QSFP, QSFP28
  B. SFP+, SFP28, QSFP
  C. SFP, SFP+, SFP28
  D. SFP, SFP+, QSFP, QSFP28
  D. SFP, SFP+, QSFP, QSFP28