Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ecus65

Checkpoint 156-836 - Check Point Certified Maestro Expert (CCME) R81.X

Page: 3 / 3
Total 88 questions

Layer 4 distribution is enabled by default in Maestro. Which is not a scenario when you would want to leave this enabled?

A.

When there is a large number of source ports in use by protocols such as HTTP, HTTPS, and DNS.

B.

When dynamic routing protocols, such as BGP or OSPF are used.

C.

When there is a heavy imbalance of traffic between the SGMs that are members of the same SG.

D.

When the SG is NATing a very high percentage of traffic passing through it.

What cannot be learned from the output of asg monitor command?

A.

Uptime

B.

Port status

C.

Security Policy status

D.

Appliances cluster status

What does asg monitor command do?

A.

This command does not exist

B.

Monitor health status of entire system

C.

Monitor traffic on Appliances in Security Group

D.

Show real-time cluster status of Appliances in Security Group

Which command can be used during an upgrade to verify that the upgraded SGMs have returned to UP status before upgrading other SGMs?

A.

asg monitor

B.

cpview

C.

asg perf -v

D.

asg stat -v

What is the maximum number of Appliances within Security group in Dual-Site configuration?

A.

28

B.

31

C.

15

D.

16

There is a Security group of 10 Appliances and all of them are up and running. How many Appliances within a Security Group keep the same connection in its connection table in case of NAT?

A.

Between 2 and 4

B.

All 10

C.

2

D.

3