156-835 Practice Exam — 113 Free Checkpoint Questions

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

113Practice Questions

3Study Modes

Free

TopicSort

Question 1

Traffic Flow

Complete the sentence: When using a Break-out cable...

A All tails of the break-out cable must represent the same type of ports
B All tails of the break-out cable must represent uplinks
C Each tail of the break-out cable represent an independent port
D All tails of the break-out cable must represent downlinks

Question 2

Introduction to Check Point Maestro

Question 3

Maestro Security Groups

Question 4

Working with Security Group Modules

Question 5

Working with Security Group Modules

Question 6

System Diagnostics

Question 7

Dual-Site Environment

Question 8

Troubleshooting

Question 9

Traffic Flow

Question 10

Incorporating VSX

Question 11

Dual Orchestrator Environment

Question 12

Traffic Flow

Question 13

Maestro Security Groups

Question 14

Dual-Site Environment

Question 15

Using the Command Line Interface and WebUI

Question 16

Introduction to Check Point Maestro

Question 17

Introduction to Check Point Maestro

Question 18

Traffic Flow

Question 19

Incorporating VSX

Question 20

Working with Security Group Modules

Question 21

Maestro Security Groups

Question 22

Dual-Site Environment

Question 23

System Diagnostics

Question 24

Traffic Flow

Question 25

Dual Orchestrator Environment

Page 1 of 5 • Questions 1-25 of 113

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

Orchestrator should be defined in SmartConsole as:

A Orchestrator is not defined in SmartConsole
B Check Point host
C Security Gateway
D Host

What is the minimal requirement for a Security Group?

A 1 Appliance and 1 management port
B 2 Appliances and 2 ports
C 1 Appliance and 1 administrator with Multi-Domain admin permissions
D None, it may be empty.

Which file on Appliance includes information about Security Group?

A /etc/chassisdb.json
B /etc/sgdb.json
C /etc/smodb.json
D /etc/distutil.json

What is a Security Group?

A Logical group of computer and network resources
B Group of security administrators
C Group of security gateways
D Group of appliances with enabled NGTX software blades

Question 6

System Diagnostics

Question 7

Dual-Site Environment

Question 8

Troubleshooting

Question 9

Traffic Flow

Question 10

Incorporating VSX

Question 11

Dual Orchestrator Environment

Question 12

Traffic Flow

Question 13

Maestro Security Groups

Question 14

Dual-Site Environment

Question 15

Using the Command Line Interface and WebUI

Question 16

Introduction to Check Point Maestro

Question 17

Introduction to Check Point Maestro

Question 18

Traffic Flow

Question 19

Incorporating VSX

Question 20

Working with Security Group Modules

Question 21

Maestro Security Groups

Question 22

Dual-Site Environment

Question 23

System Diagnostics

Question 24

Traffic Flow

Question 25

Dual Orchestrator Environment

What cannot be learned from the output of lldpctl?

A Distribution mode
B Orchestrator’s IP
C Serial number of Appliance
D Appliance model

How many orchestrators may Dual-Site include?

A 2 or 4
B 2
C Only 4
D 1

What cannot be a reason for "Failed to get remote orchestrator interfaces" error message, when clicking on "Orchestrator" in WebUI?

A Remote orchestrator has no empty interfaces
B One orchestrator only, but Orchestrator amount is 2 or no Sync in between orchestrators
C No Sync between orchestrators
D Single orchestrator environment, but configured Orchestrator amount is 2

There are two appliances within the same Security Group. One of them is connected by One downlink only, another one by Two downlinks. Assuming there's no NAT and no VPN, what would be proportion of traffic distribution done by Orchestrator?

A 66%/33%
B 100%/0%
C 50%/50%
D 33%/66%

For a VSX configuration – Which statement is wrong?

A All Virtual Systems exist on the SMO
B All Virtual Systems exist on all Appliances
C VSX configuration is the same on all Appliances within the same Security Group
D Each Appliance owns different Virtual Systems

There are two 10Gbps dual-port NIC installed on a 6800 appliance. Which interfaces should be connected to Orchestrator 1 for downlinks' intra-orchestrator redundancy when using two Orchestrators?

A Port 1 in Slot 1 and Port 2 in Slot 1
B Port 1 in Slot 2 and Port 2 in Slot 1
C Any pair of available ports
D Port 1 in Slot 1 and Port 1 in Slot 2

One single Appliance supports 1M concurrent connections. How many concurrent connections will support Security Group of 2 Appliances?

A 2M
B 500K
C 4M
D 1M

What is the default Distribution mode?

A User
B Auto-topology
C Manual-General
D Network

What kind of cluster Dual-Site can be compared to?

A Active-Standby or VSLS
B VSLS only
C Active-Active
D Active-Standby only

Which command will be used in order to restart Orchestrator service only?

A orchd restart
B cpstop; cpstart
C reboot
D service orchestrator restart

What is the Iterator process?

A Iterator is the process that simulates distribution in case of Appliance failure
B Iterator is the process that follow Appliance recovery and simulates what was a distribution if recovered Appliance was alive
C Iterator is the process that runs on the Orchestrator and calculates a distribution in case of Appliance failure
D Iterator is the process that runs on the Orchestrator and calculates a distribution in case of Appliance recovery

Which is a valid requirement for a supported Maestro appliance?

A 10GBps and 40Gbps or 100Gbps card with double-VLAN and LLDP support
B At least one 10GBps line card
C Nothing special as Maestro supports any Check Point appliance
D Line card with double-VLAN and LLDP support

What is the throughput penalty of Security Group?

A 5% per member
B Depends on the type of Appliance
C 10% per Security Group with no relation to amount of members
D 1% per member

In case of VSX: What is the right command to see overall performance details of all Appliances within the Security Group and all Virtual Systems?

A asg pert -v -p
B asg pert -vs all -v -vv
C asg pert -v
D asg pert -vs enabled -p

On MHO-170 – In default configuration, what are GAIA names of Security Group Management ports?

A eth1-Mgmt1 and eth1-Mgmt2
B eth1-Mgmt1 and eth2-Mgmt1
C eth1-Mgmt1 and eth1-Mgmt3
D eth1-Mgmt3 and eth1-Mgmt4

What is the maximum amount of Appliances within the same Security Group?

A 16
B 31
C 52
D 8

What is the maximum amount of Appliances within Security group in Dual-Site configuration?

A 16
B 15
C 28
D 31

What kinds of transceivers are supported on Orchestrator MHO-140?

A SFP, QSFP, QSFP28
B SFP, SFP+, QSFP, QSFP28
C SFP, SFP+, SFP28
D SFP+, SFP28, QSFP

What is an uplink interface used for?

A To connect in between Orchestrators
B To connect appliances to customer's infrastructure
C To connect Orchestrators to customer's infrastructure
D To connect in between appliances

What is the default range of physical ports for downlinks on Orchestrator MHO-170?

A 3 - 16
B 17 - 31
C 25 - 32
D 1 - 16

Join Us Among the Stars

156-835Preview

About the 156-835 Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25