CheckPoint 156-836 CCME Exam Practice Test Instant Access

Question 1

The SGM with the lowest member ID (the first one added to the security group.)

AThe MDS that pushes policy to the SMO is considered the SMO Master.

BThe first MHO configured is considered the SMO Master.

CThe SGM with the highest member ID (the last one added to the security group.)

DWhat Maestro component is automatically designated the SMO Master?

Answer : D

The SMO Master is the security gateway module (SGM) that has the highest member ID in a security group. It is automatically designated as the SMO Master when a security group is created.

Reference=Maestro Frequently Asked Questions (FAQ) - Check Point Software,Check Point Maestro - FAQ - Check Point CheckMates,Maestro Hyperscale Orchestrator Datasheet - Check Point Software.

Question 2

What is a downlink interface used for?

ATo connect appliances to Orchestrators

BTo connect appliances to customer's infrastructure

CTo connect in between Orchestrators

DTo connect Orchestrators to customer's infrastructure

Answer : A

A downlink interface is a physical or virtual interface that connects a security gateway to an orchestrator. It allows the security gateway to send and receive configuration updates, policy changes, and other data from the orchestrator.

Reference= [Check Point R81.10 for Scalable Platforms - Check Point Software], [Scalable Platforms (Maestro and Chassis) comparison between versions - Check Point Software], [Check Point R81.10 AI & ML Driven Threat Prevention and Security Management - Check Point Blog].

Question 3

Which is a key driver for Scalable Platform?

AOn-demand flexibility in reconfiguration.

BHyperSync provides scalability by reducing overhead.

CResiliency is achieved through the use of redundant hardware.

DCloud-level security by maximizing capabilities of existing hardware.

Answer : A

The Scalable Platform software allows you to easily add or remove security gateways from a security group without affecting the existing configuration. You can also use the command line interface or the web UI to reconfigure the security group on demand.

Reference=Check Point R81.10 for Scalable Platforms - Check Point Software,Scalable Platforms (Maestro and Chassis) comparison between versions - Check Point Software, [Check Point R81.10 AI & ML Driven Threat Prevention and Security Management - Check Point Blog]

Question 4

What is the Correction Layer?

ACorrection Layer is a daemon which corrects errors on Backplane interfaces

BCorrection Layer is a mechanism which handles asymmetric connections in multi-appliance system. For example, in case of NAT

CCorrection Layer is a mechanism which activated in case of asymmetric routing

DCorrection Layer is a Layer of GAIA OS which corrects misspelled commands and allows them to execute

Answer : B

The Correction Layer keeps track of all connections which it knows will have return packets that will not hit the same gateway in the security group. It adds metadata to the packets to ensure that they are routed correctly and the connection is maintained.

Reference=correction layer statistics - Check Point CheckMates,Check Point MAESTRO R80.20SP Administration Manual,Maestro Frequently Asked Questions (FAQ) - Check Point Software

Question 5

Which blade configuration files should be backed up on the SG if upgrading from R80.30SP or earlier?

AIPS configuration files

Bfwkern.conf files.

CVPN configuration files

DMobile Access configuration files.

Answer : B

Reference

* Maestro R80.30SP Jumbo Hotfix Accumulator, Section: Important Notes

* Check Point Maestro R80.30SP with Gaia 3.10, Section: Known Limitations

* Check Point SNMP MIB files, Section: Revision History

Question 6

What cannot be a reason for "Failed to get remote orchestrator interfaces" error message, when clicking on "Orchestrator" in WebUI

ARemote orchestrator has no empty interfaces

BSingle orchestrator environment, but configured Orchestrator amount is 2

COne orchestrator only, but Orchestrator amount is 2 or no Sync in between orchestrators

DNo Sync between orchestrators

Answer : A

One of the possible reasons for the ''Failed to get remote orchestrator interfaces'' error message, when clicking on ''Orchestrator'' in WebUI, is that the remote orchestrator has no empty interfaces that can be assigned to a security group. This can happen if all the interfaces on the remote orchestrator are already part of configured security groups, or if the remote orchestrator has no physical interfaces at all. In this case, the WebUI cannot display the unassigned interfaces of the remote orchestrator, and shows the error message.

Reference

* Not able to see unassigned interfaces on checkpoint Orchestrator

* Maestro 140 not detecting Interfaces

* Maestro Expert (CCME) Course - Check Point Software, page

Question 7

What is one benefit of a Dual MHO environment?

ADual MHOs provide redundancy to the Maestro environment by increasing throughput by at least 50 percent.

BDual MHOs allow better synchronization to occur between SGMs.

CDual MHOs allow additional SGMs to be added to the SG.

DDual MHOs can be used to achieve increased scalability and redundancy.
.

Answer : D

One of the benefits of a Dual MHO environment is that it can provide both scalability and redundancy to the Maestro system. Scalability means that the system can handle more traffic and SGMs as the demand grows, and redundancy means that the system can survive the failure of one or more components without losing functionality or performance. Dual MHOs can achieve these benefits by distributing the load and the management tasks among two orchestrators, and by providing backup and failover mechanisms for each other.

Reference

* Maestro Expert (CCME) Course - Check Point Software, page 251

* CheckPoint Certified Maestro Expert (CCME) - Skillzcafe, page 22

* Check Point Certified Maestro Expert (CCME) R81.X, page 23

CheckPoint 156-836 Check Point Certified Maestro Expert - R81.X CCME Exam Practice Test