CheckPoint 156-836 CCME Exam Questions Instant Access

Question 1

What is the purpose of interface bonding?

AA bond interface can be configured for high availability redundancy.

BA bond interface is used for passing synchronization traffic between the SGMs.

CFor load sharing which increases connection throughput above that which is possible using one physical interface.

DA bond interface can be configured for high availability redundancy or for load sharing which increases connection throughput above that which is possible using one physical interface.

Answer : D

Question 2

What is a downlink interface used for?

ATo connect appliances to Orchestrators

BTo connect appliances to customer's infrastructure

CTo connect in between Orchestrators

DTo connect Orchestrators to customer's infrastructure

Answer : A

Question 3

Is it possible to define distribution mode per interface?

AYes, only for downlink interfaces

BNo, only for the Security Group

CYes, only for uplink interfaces

DYes, for both uplink and downlink interfaces

Answer : D

Question 4

When a VPN tunnel is formed with a Maestro SGM,

AThe receiving SGM makes an encryption decision. The SGM then syncs the traffic to two backup SGMs: one for clear traffic and one for encrypted traffic.

BSGM 1 analyzes the policy and topology. If encryption is required, it calculates the tunnel owner's IP address. SGM 1 sends a clear packet to the tunnel owner. SGM 2 is now the connection and tunnel owner.

CThe MHO handles the IKE before distributing the traffic to a SGM to handle all encrypted traffic. This helps to prevent any issues with the correction layer.

DThe MHO distributes copies of the packets to two different SGMs because SGM 1 will handle the clear traffic IKE exchange packets, while SGM2 handles encrypted packets.

Answer : B

Question 5

What Maestro component is automatically designated the SMO Master?

AThe SGM with the lowest member ID (the first one added to the security group.)

BThe MDS that pushes policy to the SMO is considered the SMO Master.

CThe first MHO configured is considered the SMO Master.

DThe SGM with the highest member ID (the last one added to the security group.)

Answer : A

Question 6

Where should the sx_api_ports_dump.py command be run?

AManagement server

BSecurity Group

COrchestrator

DSMO Appliance

Answer : C

Question 7

What Maestro component acts as a load balancer and network switch?

ASecurity Switching Module (SSM)

BMaestro Hyperscale Orchestrator (MHO)

CSecurity Group (SG)

DSecurity Gateway Module (SGM)

Answer : B

CheckPoint Check Point Certified Maestro Expert - R81.X 156-836 CCME Exam Questions