CheckPoint 156-836 Online Practice Questions and Exam Preparation

CheckPoint 156-836 Online Questions & Answers

• Question 61:

  In a Maestro Dual Site environment, what is the definition of the term Active Site.

  A. The Active Site is the site that is not handling any traffic for the specific SG, but its connections are synced to its SGMs from the MHOs to be ready in the event of a failover.
  B. The Active Site is the site where the SMO Master exists.
  C. There is no such thing as an active site. In a Dual Site environment, traffic is load balanced.
  D. The Active Site is the site currently handling the enforcement on traffic passing for a specific SG. Connections are synced within the SGMs in the Active Site.
  D. The Active Site is the site currently handling the enforcement on traffic passing for a specific SG. Connections are synced within the SGMs in the Active Site.

• Question 62:

  What cannot be learned from the output of lldpctl?

  A. Serial number of Appliance
  B. Appliance model
  C. Distribution mode
  D. Orchestrator's IP
  C. Distribution mode

• Question 63:

  What is the maximum number of Appliances within Security group in Dual-Site configuration?

  A. 28
  B. 31
  C. 15
  D. 16
  A. 28

• Question 64:

  What will happen in case of NAT of the traffic passing through Management network?

  A. This traffic will not pass correction, since it will be dropped
  B. Orchestrator will disable NAT and traffic will pass with no issue
  C. Since Management traffic is always going to SMO, it will take a care for Correction Layer and will re-distribute traffic to other Appliances
  D. This traffic will pass with no inspection
  B. Orchestrator will disable NAT and traffic will pass with no issue

• Question 65:

  What is an uplink interface used for?

  A. To connect in between appliances
  B. To connect appliances to customer's infrastructure
  C. To connect Orchestrators to customer's infrastructure
  D. To connect in between Orchestrators
  C. To connect Orchestrators to customer's infrastructure

• Question 66:

  A splitter cannot be used:

  A. To connect a single port on an Orchestrator to the same Appliance
  B. To connect a single port on an Orchestrator to multiple ports on an external switch
  C. To connect a single port on an Appliance to multiple ports on the Orchestrator
  D. To connect a single port on an Orchestrator to multiple Appliances
  A. To connect a single port on an Orchestrator to the same Appliance

• Question 67:

  Which feature is used to force trusted non-F2F traffic into the fully accelerated path for handling by SecureXL.

  A. Fast Accelerator
  B. hypersync
  C. rate limiting
  D. SecureXL
  D. SecureXL

• Question 68:

  What is the default Distribution mode?

  A. Auto-topology
  B. User
  C. Manual-General
  D. Network
  A. Auto-topology

• Question 69:

  Which command is used to set the number of sites in a Maestro environment?

  A. set maestro orchestrator-site-amount
  B. set maestro configuration orchestrator-site-amount
  C. set maestro configuration orchestrator-site-number
  D. set maestro configuration orchestrator-site-id
  B. set maestro configuration orchestrator-site-amount

• Question 70:

  What is the Correction Layer?

  A. Correction Layer is a daemon which corrects errors on Backplane interfaces
  B. Correction Layer is a mechanism which handles asymmetric connections in multi- appliance system. For example, in case of NAT
  C. Correction Layer is a mechanism which activated in case of asymmetric routing
  D. Correction Layer is a Layer of GAIA OS which corrects misspelled commands and allows them to execute
  B. Correction Layer is a mechanism which handles asymmetric connections in multi- appliance system. For example, in case of NAT