Free Check Point Certified Maestro Expert – R81.X Exam 156-836 Exam Practice Test

What cannot be learned from the output of asg monitor command?

• Uptime
• Port status
• Security Policy status
• Appliances cluster status

There are two 10Gbps dual-port NICs and one 40Gbps NIC installed on a 23800 Appliance in slots 1, 2 and 3 accordingly. Which interfaces should be connected to Orchestrator 1 for downlinks' intra- orchestrator redundancy when using two Orchestrators?

• Port 1 in Slot 2 and Port 2 in Slot 1
• This configuration is not supported
• Any pair of available ports
• Port 1 in Slot 1 and Port 2 in Slot 1

What happens when you make changes from Clish on the SMO Master?

• The changes are synchronized to the SMS/MDS as a backup.
• The changes are synchronized to the MHO as a backup.
• Changes are only applied on the SMO Master.
• Changes are applied to all members in the SG.

There are two appliances within the same Security Group. One of them is connected by One downlink only, another one by Two downlinks. Assuming there's no NAT and no VPN, what would be proportion of traffic distribution done by Orchestrator?

• 100%/0%
• 33%/66%
• 50%/50%
• 66%/33%

The SGM with the lowest member ID (the first one added to the security group.)

• The MDS that pushes policy to the SMO is considered the SMO Master.
• The first MHO configured is considered the SMO Master.
• The SGM with the highest member ID (the last one added to the security group.)
• What Maestro component is automatically designated the SMO Master?

What happens if the SMO Master fails?

• The next SGM with the current lowest SGM ID assumes the role of the SMO Master.
• The Backup SMO Master will take over in the event of a failure with the SMO Master.
• A failover will occur on the MHO and traffic will continue to pass.
• The Security Group will no longer pass traffic and the issue must be resolved with the SMO Master.

Which command should be used to restart Orchestrator service only?

• orchd restart
• reboot
• service orchestrator restart
• cpstop; cpstart

HealthCheck Point

• is a self-updatable suite of tools for MHOs with the capability to assess the health of the system and provide a timeline of critical and informative events that might have occurred in a production system.
• performs a system health check and is meant to replace both a CPInfo and the health check script.
• can be used to let you visualize the Firewall topology for the SG and view live statistics, which includes throughput, problem notes, and CPU utilization.
• is a self-updatable suite of tools for SGMs with the capability to assess the health of the system, visualize the Firewall topology, provide a timeline of critical and informative events that might have occurred in a production system.

On the MHO, to view connected ports and their functions, use the following command:

• asg_ifconfig
• show ports
• orch_stat -c
• orch_stat -p

During an upgrade, Is Multi-Version Clustering (MVC) supported?

• No. Maestro does not support MVC because ClusterXL is disabled during an upgrade.
• No, Maestro does not support MVC.
• Maestro supports MVC or full connectivity upgrade as of R80.40.
• Yes, MVC is supported as of R81 for Maestro.