Labour Day Special 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

Check Point Certified Maestro Expert - R81 (CCME) Question and Answers

Check Point Certified Maestro Expert - R81 (CCME)

Last Update Apr 28, 2024
Total Questions : 0

We are offering FREE 156-836 Checkpoint exam questions. All you do is to just go and sign up. Give your details, prepare 156-836 free exam questions and then go for complete pool of Check Point Certified Maestro Expert - R81 (CCME) test questions that will help you more.

156-836 pdf

156-836 PDF

$35  $99.99
156-836 Engine

156-836 Testing Engine

$42  $119.99
156-836 PDF + Engine

156-836 PDF + Testing Engine

$297.5  $850
Questions 1

What is the Correction Layer mechanism?

Options:

A.  

Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.

B.  

The load-balancing mechanism used by the MHO.

C.  

The MHO's distribution algorithm which determines the handling SGM for a given connection.

D.  

Enforces the access policy on the SGMs and synchronizes the enforcement verdict to other SGMs in the SG.

Discussion 0
Questions 2

What is the max amount of Orchestrators in Dual-site setup?

Options:

A.  

2 per Security Group

B.  

4 per Security Group

C.  

2

D.  

4

Discussion 0
Questions 3

The core four manual diagnostic tools include:

asg diag verify, asg perf -v, orch_stat -all, and

Options:

A.  

asg diag verify

B.  

cpinfo

C.  

hcp -r all

D.  

asg stat -v

Discussion 0
Questions 4

At a minimum, how many management and Uplink ports does a SG require?

Options:

A.  

Only one of the two interfaces is needed for the Security Group.

B.  

Neither are required.

C.  

Two of each.

D.  

One each.

Discussion 0
Questions 5

What does asg monitor command do?

Options:

A.  

This command does not exist

B.  

Monitor health status of entire system

C.  

Monitor traffic on Appliances in Security Group

D.  

Show real-time cluster status of Appliances in Security Group

Discussion 0
Questions 6

Which distribution mode assigns packets to an SGM based solely on the packet destination IP?

Options:

A.  

User mode

B.  

Manual mode

C.  

Network mode

D.  

Auto-topology mode

Discussion 0
Questions 7

What does the lldpctl command do?

Options:

A.  

Show all devices discovered by LLDP protocol on downlink ports

B.  

Show all devices discovered by LLDP protocol on all ports

C.  

Discover orchestrators

D.  

Show all devices discovered by LLDP protocol on uplink ports

Discussion 0
Questions 8

What type of cluster can a Security Group can be compared to?

Options:

A.  

Load Sharing Active / Active

B.  

VSLS

C.  

Active / Backup

D.  

Active / Standby

Discussion 0
Questions 9

What Maestro component is automatically designated the SMO Master?

Options:

A.  

The SGM with the lowest member ID (the first one added to the security group.)

B.  

The MDS that pushes policy to the SMO is considered the SMO Master.

C.  

The first MHO configured is considered the SMO Master.

D.  

The SGM with the highest member ID (the last one added to the security group.)

Discussion 0
Questions 10

What is the default Distribution mode?

Options:

A.  

Auto-topology

B.  

User

C.  

Manual-General

D.  

Network

Discussion 0
Questions 11

The _______ command will allow users to update the specified file on all SGMs.

Options:

A.  

g_update_conf_file

B.  

g_all"

C.  

sed

D.  

g_cat

Discussion 0
Questions 12

In what mode do MHOs process traffic?

Options:

A.  

MHOs process traffic in load sharing mode

B.  

MHOs process traffic in Active-Standby mode

C.  

MHOs process traffic in Active-Active mode

D.  

MHOs process traffic in VSLS mode

Discussion 0
Questions 13

Which command do you use to find bottlenecks in the system that are affecting performance, even functionality in some cases?

Options:

A.  

asg stat -v

B.  

asg diag verify

C.  

asg perf -v

D.  

asg monitor

Discussion 0
Questions 14

When working with Maestro, what is the difference between using Clish and gClish?

Options:

A.  

Clish commands are for testing purposes only and cannot be saved, gClish commands apply to all SG members, by default.

B.  

Clish commands apply to all UP SG members, by default. gClish commands apply to all SG members, by default.

C.  

Clish commands are run on the SG members. gClish commands are run on the MHO and applied to all connected SG members in a specified group.

D.  

Clish commands apply only to a specific SG member. gClish commands apply to all UP SG members, by default.

Discussion 0
Questions 15

For the MHO-175, which ports are Management ports?

Options:

A.  

Ports 49 - 55 are Management ports.

B.  

Ports 1 - 4 are Management ports.

C.  

Ports 27 - 47 are Management ports.

D.  

Ports 5 - 26 are Management ports.

Discussion 0
Questions 16

How many orchestrators may Dual-Site include?

Options:

A.  

2 or 4

B.  

2

C.  

1

D.  

Only 4

Discussion 0
Questions 17

What type of cluster can a Security Group can be compared to?

Options:

A.  

Load Sharing Active / Active

B.  

VSLS

C.  

Active / Backup

D.  

Active / Standby

Discussion 0
Questions 18

What is the maximum number of Appliances within the same Security Group?

Options:

A.  

31

B.  

8

C.  

52

D.  

16

Discussion 0
Questions 19

During an upgrade, Is Multi-Version Clustering (MVC) supported?

Options:

A.  

No. Maestro does not support MVC because ClusterXL is disabled during an upgrade.

B.  

No, Maestro does not support MVC.

C.  

Maestro supports MVC or full connectivity upgrade as of R80.40.

D.  

Yes, MVC is supported as of R81 for Maestro.

Discussion 0
Questions 20

What happens if the SMO Master fails?

Options:

A.  

The next SGM with the current lowest SGM ID assumes the role of the SMO Master.

B.  

The Backup SMO Master will take over in the event of a failure with the SMO Master.

C.  

A failover will occur on the MHO and traffic will continue to pass.

D.  

The Security Group will no longer pass traffic and the issue must be resolved with the SMO Master.

Discussion 0
Questions 21

Which command is used to set the number of sites in a Maestro environment?

Options:

A.  

set maestro orchestrator-site-amount

B.  

set maestro configuration orchestrator-site-amount

C.  

set maestro configuration orchestrator-site-number

D.  

set maestro configuration orchestrator-site-id

Discussion 0
Questions 22

What is the maximum number of Appliances within Security group in Dual-Site configuration?

Options:

A.  

28

B.  

31

C.  

15

D.  

16

Discussion 0