Checkpoint 156-836 Test Dumps

D.   Yes, MVC is supported as of R81 for Maestro.

Answer DescriptionMulti-Version Clustering (MVC) is a feature that allows different versions of Security Gateways to operate in the same cluster and provide seamless failover and load balancing. MVC is supported for Maestro environments as of R81, which means that it is possible to upgrade the Security Groups in a Maestro environment as a Multi-Version Cluster with zero downtime. This requires that the Maestro Orchestrators are upgraded to R81.20 first, and then the Security Groups can be upgraded one by one to R81.20 while maintaining full connectivity and synchronization.

References
•Check Point R81.20 for Scalable Platforms - Check Point Software
•Maestro Dual Site configuration with a direct connection through L2 switches
•CHECK POINT MAESTRO EXPERT

B.   Ports 1 - 4 are Management ports.

Answer DescriptionAccording to the Port Mapping for the Check Point Maestro HyperScale Orchestrator MHO-175 document1, ports 1 - 4 are Management ports that are used to connect the MHO to the customer’s management infrastructure, such as SmartConsole or SmartDomain Manager. Ports 5 - 26 are Uplink ports that are used to connect the MHO to the customer’s network infrastructure, such as switches, routers, or firewalls. Ports 27 - 47 are Downlink ports that are used to connect the MHO to the Security Group Modules (SGMs) in the Security Group. Ports 49 - 55 are Backplane ports that are used to connect the MHO to another MHO in a Dual Orchestrator environment.

References:
•Maestro Expert (CCME) Course - Check Point Software, page 42
•Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline3
•Port Mapping for the Check Point Maestro HyperScale Orchestrator MHO-1751

C.   Each active connection has a local backup (on the local site) and a second backup connection on the second site (remote site.)

Answer DescriptionHyperSync is a feature of Maestro that enables stateful synchronization of connections and resources across different sites in a Dual Site environment. HyperSync works by creating two backup connections for each active connection: one on the same site as the active connection, and another on the remote site. This ensures that the connection can be seamlessly resumed in case of a failover event, either within the same site or across the sites. HyperSync uses the Site-Sync port and VLANs to transmit the synchronization packets between the Security Group Members and the Maestro Orchestrators.

References
•Maestro Dual Site configuration with a direct connection through L2 switches
•Maestro Frequently Asked Questions (FAQ)
•CHECK POINT MAESTRO EXPERT

C.   Changes are only applied on the SMO Master.

Answer DescriptionReferences

•Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro
Security Groups, Lesson 2.2: Security Group Configuration, page 2-10
•Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups,
Section: Security Group Configuration, page 2-9
•Security Group Configuration - Check Point Software

C.   An administrator imported a hotfix into the CPUSE repository of a single SGM.

Answer DescriptionOne of the possible causes of a failure in a single SGM of a Security Group is that an administrator imported a hotfix into the CPUSE repository of a single SGM, instead of using the orchestrator to distribute the hotfix to all the SGMs in the Security Group. This can create a mismatch in the software versions and configurations of the SGMs, and lead to unexpected behavior and errors.

References
•Maestro Expert (CCME) Course - Check Point Software, page 251
•sk172923: The /var/log/messages file does not save Maestro Gaia Clish commands2
•sk180418: Security Gateway Member (SGM) is stuck after it is added to a Security Group
with image auto cloning enabled on the Single Management Object (SMO)