CheckPoint 156-836 Check Point Certified Maestro Expert - R81.X CCME Exam Practice Test
Page: 1 / 14 Total 94 questions
Want more questions? Get Premium Access. ()
Question 1
Which command is used to set the number of sites in a Maestro environment?
Answer : B
This command is used to set the number of sites in a Maestro environment, which can be either one or two. The number of sites determines the site-sync configuration and the failover policies for the Security Groups and the Security Group Members. The default value is one, and it can be changed only before the first Security Group is created.
* Check Point R81.10 for Scalable Platforms - Check Point Software
* CHECK POINT MAESTRO EXPERT
Question 2
Which command should be used to restart Orchestrator service only?
Answer : A
Page 313 from the training manual:
- Restart the service:
orchd restart
- Restart the service without confirmation
service orchd restart
Question 3
In what mode do MHOs process traffic?
Answer : C
MHOs process traffic in Active-Active mode, which means that both MHOs are active and share the load of the traffic that is sent to and from the SGMs. Active-Active mode provides better performance and scalability than Active-Standby mode, which only uses one MHO at a time and keeps the other as a backup. Active-Active mode also allows for faster failover and recovery in case of an MHO failure, as the surviving MHO can take over the traffic without interruption.
* Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, page 2
Question 4
In a dual MHO environment, MHO1 and MHO2 are connected to the SGM line cards in which way?
Answer : C
The correct way to connect MHO1 and MHO2 to the SGM line cards in a dual MHO environment is to use the even-numbered ports for MHO1 and the odd-numbered ports for MHO2. This is to ensure that each SGM has two downlinks to each MHO, and that the downlinks are balanced across the different NICs and links. This provides redundancy and high availability for the traffic flow between the SGMs and the MHOs.
Reference
* R81.20 Maestro Cheat Sheet version 7 - Check Point CheckMates, page 2
* [Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge], page 3
Question 6
What cannot be a reason for "Failed to get remote orchestrator interfaces" error message, when clicking on "Orchestrator" in WebUI
Answer : A
One of the possible reasons for the ''Failed to get remote orchestrator interfaces'' error message, when clicking on ''Orchestrator'' in WebUI, is that the remote orchestrator has no empty interfaces that can be assigned to a security group. This can happen if all the interfaces on the remote orchestrator are already part of configured security groups, or if the remote orchestrator has no physical interfaces at all. In this case, the WebUI cannot display the unassigned interfaces of the remote orchestrator, and shows the error message.
Reference
* Not able to see unassigned interfaces on checkpoint Orchestrator
* Maestro 140 not detecting Interfaces
* Maestro Expert (CCME) Course - Check Point Software, page
Question 7
What is one benefit of a Dual MHO environment?
Answer : D
One of the benefits of a Dual MHO environment is that it can provide both scalability and redundancy to the Maestro system. Scalability means that the system can handle more traffic and SGMs as the demand grows, and redundancy means that the system can survive the failure of one or more components without losing functionality or performance. Dual MHOs can achieve these benefits by distributing the load and the management tasks among two orchestrators, and by providing backup and failover mechanisms for each other.
All Official Question Types