Checkpoint 156-836 Test Dumps

B.   4 per Security Group

Answer DescriptionExplanation:

A Dual Site setup can have either two or four orchestrators, depending on the scenario. However, the maximum number of orchestrators per Security Group is four, regardless of the number of sites. This is because each Security Group can have up to two orchestrators on each site, and each site can have up to two orchestrators. Therefore, the maximum number of orchestrators in a Dual Site setup is four per Security Group.

References =

•Maestro Frequently Asked Questions (FAQ)
•Maestro Dual Site configuration with a direct connection through L2 switches
•Dual Site Single Maestro Hyperscale Orchestrator Cluster (Dual Site Single MHO Redundancy)

A.   orchd restart

Answer DescriptionExplanation:

Page 313 from the training manual:
- Restart the service:
orchd restart
- Restart the service without confirmation
service orchd restart

B.   Maestro Hyperscale Orchestrator (MHO)

Answer DescriptionExplanation:

•The Quantum Maestro Orchestrator uses the Distribution Mode to assign incoming traffic to Security Group Members.
•Reference: Working with the Distribution Mode

D.   Port 1 in Slot 1 and Port 2 in Slot 1

Answer DescriptionExplanation:

This configuration likely provides balanced and redundant connectivity for orchestrator redundancy.

References

•Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 3: Dual Orchestrator Environment, Lesson 3.1: Introduction to Dual Orchestrator Environment, page 3-7
•Check Point R81 Maestro Administration Guide, Chapter 3: Working with Security Group Modules, Section: Downlinks, page 3-8
•Check Point 23800 Appliance Datasheet - Check Point Software, page 2

B.   Show all devices discovered by LLDP protocol on all ports

Answer DescriptionExplanation:

The lldpctl command is a tool to display information about the devices discovered by the Link Layer Discovery Protocol (LLDP) on all ports of the Maestro Orchestrator and the Security Group Members. LLDP is a protocol that enables devices to exchange information about their identity, capabilities, and configuration. LLDP can help to discover the topology and connectivity of the Maestro environment.

References

•Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.2: LLDP, page 4-9
•Check Point R81 Maestro Administration Guide, Chapter 3: Working with Security Group Modules, Section: LLDP, page 3-9

A.   No licenses are required for Orchestrator

Answer DescriptionExplanation:

Orchestrators in many network environments do not require separate licenses, as they primarily function to manage and distribute network traffic.

References

•Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 1: Introduction to Check Point Maestro, Lesson 1.2: Maestro Licensing, page 1-8
•Check Point R81 Maestro Administration Guide, Chapter 1: Introduction to Check Point Maestro, Section: Maestro Licensing, page 1-6
•Activation of a Quantum Maestro Orchestrator - Check Point Software

C.   The MHO does not require a license.

Answer DescriptionExplanation:

The MHO (Maestro Hyperscale Orchestrator) does not require a license by itself, but each SGM (Security Group Module) that is attached to the MHO needs a license. The license type depends on the features and blades that are enabled on the SGM. For example, if the SGM is running VSX, it needs a VSX license.

References:

•Maestro Expert (CCME) Course - Check Point Software, page 71
•Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline

A.   The next SGM with the current lowest SGM ID assumes the role of the SMO Master.

Answer DescriptionExplanation:

This aligns with the principle of redundancy in network systems, where the next available device with the lowest ID typically takes over management roles in case of a failure.

References:

•Maestro Expert (CCME) Course - Check Point Software, page 91
•Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline

A.   Load Sharing Active / Active

Answer DescriptionExplanation:

A Security Group can be compared to a Load Sharing Active / Active cluster because it consists of multiple Security Group Members that share the traffic load and provide high availability and scalability. Each Security Group Member is an active firewall that processes traffic according to the Security Group policy and synchronizes its state with other members. The Maestro Orchestrator acts as a load balancer that distributes the traffic among the Security Group Members based on their capacity and availability.

References

•Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.1: Introduction to Security Groups, page 2-4

•Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section: Security Group Overview, page 2-3

B.   Manager of compute and network resources, load balancer and network switch

Answer DescriptionExplanation:

The Orchestrator is a Maestro component that manages the compute and network resources of the Security Group Modules (SGMs) in a Security Group. It also acts as a load balancer and a network switch, distributing traffic among the SGMs and connecting them to the customer’s network infrastructure.

References:

•Maestro Expert (CCME) Course - Check Point Software, page 41
•Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline