CheckPoint 156-836 Online Practice Questions and Exam Preparation

CheckPoint 156-836 Online Questions & Answers

• Question 41:

  The core four manual diagnostic tools include: asg diag verify, asg perf -v, orch_stat -all, and

  A. asg diag verify
  B. cpinfo
  C. hcp -r all
  D. asg stat -v
  D. asg stat -v

• Question 42:

  For the MHO-175, which ports are Management ports?

  A. Ports 49 - 55 are Management ports.
  B. Ports 1 - 4 are Management ports.
  C. Ports 27 - 47 are Management ports.
  D. Ports 5 - 26 are Management ports.
  B. Ports 1 - 4 are Management ports.

• Question 43:

  After you import the R81.10 software package, what do you use to verify that it is possible to upgrade an MHO or SG?

  A. Run HCP. One of the tests will list upgrade eligibility status for the MHO or SG.
  B. Run the Pre-Upgrade Verifier to make sure it is possible to upgrade
  C. Nothing. CPUSE will run a verification during the upgrade process to ensure the package is compatible.
  D. The package is verified during the import process and a warning or error will be displayed at that time.
  B. Run the Pre-Upgrade Verifier to make sure it is possible to upgrade

• Question 44:

  What is the Correction Layer mechanism?

  A. Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.
  B. The load-balancing mechanism used by the MHO.
  C. The MHO's distribution algorithm which determines the handling SGM for a given connection.
  D. Enforces the access policy on the SGMs and synchronizes the enforcement verdict to other SGMs in the SG.
  A. Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.

• Question 45:

  What Maestro component acts as a load balancer and network switch?

  A. Security Switching Module (SSM)
  B. Maestro Hyperscale Orchestrator (MHO)
  C. Security Group (SG)
  D. Security Gateway Module (SGM)
  B. Maestro Hyperscale Orchestrator (MHO)

• Question 46:

  What command can be run to show which SGM is selected to receive traffic?

  A. g_tcpdump
  B. asg monitor
  C. dxl calc
  D. asg calc
  D. asg calc

• Question 47:

  Logs without a dedicated log file can be found in

  A. /var/log/junk.log.dbg
  B. /var/log/messages
  C. $RTDIR/log/junk.log
  D. $FWDIR/log/fw.log
  B. /var/log/messages

• Question 48:

  To display processes that are consuming excessive system resources, users should use the_____ command.

  A. asg perf -v
  B. asg stat -v
  C. top
  D. asg_perf_hogs
  D. asg_perf_hogs

• Question 49:

  Is it possible to define distribution mode per interface?

  A. Yes, only for downlink interfaces
  B. No, only for the Security Group
  C. Yes, only for uplink interfaces
  D. Yes, for both uplink and downlink interfaces
  D. Yes, for both uplink and downlink interfaces

• Question 50:

  What is a security group?

  A. A solution for Security Gateway redundancy and Load Sharing.
  B. A set of appliances of the same model that are collectively managed by the MHO.
  C. A set of network interfaces and individual SGMs assigned to a logical group.
  D. A set of objects in SmartConsole that are responsible for enforcing an access policy.
  A. A solution for Security Gateway redundancy and Load Sharing.