2024年最新ののCheckPoint 156-836リアル試験問題集PDF
156-836試験問題集、156-836練習テスト問題
Check Point Maestroソリューションは、組織がセキュリティゲートウェイの大規模ネットワークを管理および展開することができるネットワークセキュリティソリューションです。中央集中管理プラットフォームを提供し、組織がセキュリティポリシーや設定を一箇所から管理できるようにします。このソリューションは、スケーラブルで柔軟性があり、展開が容易であり、すべてのサイズの組織にとって理想的なソリューションです。
質問 # 42
What does the lldpctl command do?
- A. Discover orchestrators
- B. Show all devices discovered by LLDP protocol on all ports
- C. Show all devices discovered by LLDP protocol on downlink ports
- D. Show all devices discovered by LLDP protocol on uplink ports
正解：B
解説：
Explanation
The lldpctl command is a tool to display information about the devices discovered by the Link Layer Discovery Protocol (LLDP) on all ports of the Maestro Orchestrator and the Security Group Members. LLDP is a protocol that enables devices to exchange information about their identity, capabilities, and configuration.
LLDP can help to discover the topology and connectivity of the Maestro environment.
References
*Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.2: LLDP, page 4-9
*Check Point R81 Maestro Administration Guide, Chapter 3: Working with Security Group Modules, Section:
LLDP, page 3-9
質問 # 43
What is an uplink interface used for?
- A. To connect in between Orchestrators
- B. To connect Orchestrators to customer's infrastructure
- C. To connect in between appliances
- D. To connect appliances to customer's infrastructure
正解：B
解説：
Explanation
Uplink interfaces are used to connect Maestro Hyperscale Orchestrators (MHOs) to the customer's network infrastructure, such as switches, routers, or firewalls. They are also used to send and receive management and control traffic from the customer's network to the MHOs.
References:
*Maestro Expert (CCME) Course - Check Point Software, page 41
*Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline
質問 # 44
What is the purpose of Management ports located on the Rear Panel of the Orchestrator MHO-140?
- A. 1Gbps connectivity for Security Groups
- B. Out-of-band interfaces for access to Orchestrator itself
- C. Reserved for internal purposes. Not in use.
- D. Additional ports used as uplinks
正解：B
解説：
Explanation
The Management ports located on the Rear Panel of the Orchestrator MHO-140 are out-of-band interfaces that provide access to the Orchestrator itself for configuration and management purposes. They are not used for traffic distribution or connectivity to the Security Groups or the external networks. They are 1Gbps RJ-45 ports that can be connected to a switch or a router.
References
*Maestro Hyperscale Orchestrator Datasheet - Check Point Software1, page 2
*Quantum Maestro Getting Started Guide - Check Point CheckMates2, page 4
質問 # 45
What is the purpose of RJ-45 connectors located at the front panel of the Orchestrator MHO-170?
- A. 1Gbps connectivity for Security Groups
- B. Two Out-of-band interfaces for access to Orchestrator itself
- C. Out-of-band interface for access to Orchestrator itself and Serial Console connector
- D. Reserved for internal purposes. Not in use
正解：C
解説：
Explanation
The RJ-45 connectors located at the front panel of the Orchestrator MHO-170 are used for out-of-band management and serial console access. One of them is a 1Gbps RJ-45 port that provides an out-of-band interface for accessing the Orchestrator itself for configuration and management purposes. The other one is a RJ-45 serial console port that provides a command-line interface for initial setup and troubleshooting.
References
*Maestro Hyperscale Orchestrator Datasheet - Check Point Software1, page 2
*Quantum Maestro Getting Started Guide - Check Point CheckMates, page 4
質問 # 46
What is a downlink interface used for?
- A. To connect in between Orchestrators
- B. To connect Orchestrators to customer's infrastructure
- C. To connect appliances to Orchestrators
- D. To connect appliances to customer's infrastructure
正解：D
質問 # 47
What is one benefit of a Dual MHO environment?
- A. Dual MHOs can be used to achieve increased scalability and redundancy.
. - B. Dual MHOs allow additional SGMs to be added to the SG.
- C. Dual MHOs allow better synchronization to occur between SGMs.
- D. Dual MHOs provide redundancy to the Maestro environment by increasing throughput by at least 50 percent.
正解：A
解説：
Explanation
One of the benefits of a Dual MHO environment is that it can provide both scalability and redundancy to the Maestro system. Scalability means that the system can handle more traffic and SGMs as the demand grows, and redundancy means that the system can survive the failure of one or more components without losing functionality or performance. Dual MHOs can achieve these benefits by distributing the load and the management tasks among two orchestrators, and by providing backup and failover mechanisms for each other.
References
*Maestro Expert (CCME) Course - Check Point Software, page 251
*CheckPoint Certified Maestro Expert (CCME) - Skillzcafe, page 22
*Check Point Certified Maestro Expert (CCME) R81.X, page 23
質問 # 48
What cannot be learned from the output of asg monitor command?
- A. Security Policy status
- B. Port status
- C. Appliances cluster status
- D. Uptime
正解：A
解説：
Explanation
The asg monitor command is a tool to display the status and statistics of the Maestro Security Group Members and the Orchestrators. It shows information such as uptime, port status, CPU usage, memory usage, traffic distribution, and appliances cluster status. However, it does not show the security policy status, such as the policy name, installation time, or revision. To view the security policy status, other commands such as asg policy or fw stat can be used.
References
*Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.1: asg monitor, page 4-3
*Check Point R81 Maestro Administration Guide, Chapter 4: Using the Command Line Interface and WebUI, Section: asg monitor, page 4-3
*asg monitor - Check Point Software
質問 # 49
Splitter cannot be used _______
- A. To connect single port on Appliance to multiple ports on the orchestrator
- B. To connect single port on orchestrator to multiple Appliances
- C. To connect single port on orchestrator to the same Appliance
- D. To connect single port on orchestrator to multiple port on external switch
正解：C
質問 # 50
What is the maximum number of Appliances within Security group in Dual-Site configuration?
- A. 0
- B. 1
- C. 2
- D. 3
正解：C
質問 # 51
What is the default Distribution mode?
- A. Network
- B. Auto-topology
- C. User
- D. Manual-General
正解：B
解説：
Explanation
Auto-topology is the default distribution mode for Maestro Security Groups. In this mode, the Orchestrator assigns packets to a Security Group Member based on the topology of the port defined in the gateway object.
Each port is either in user mode or network mode depending on the topology. User mode means that the port is connected to the internal network and network mode means that the port is connected to the external network.
The Orchestrator uses a hash function to map each source IP or destination IP to a specific SGM, depending on the mode of the port. This mode ensures that all packets with the same source IP or destination IP are processed by the same SGM, regardless of the port or protocol.
References
*Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.4: Traffic Flow, page 2-18
*Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section: Traffic Distribution, page 2-7
*Lari Luoma | Lead Consultant | Maestro SME | Check Point Evangelist1, slide 16
質問 # 52
For the MHO-175, which ports are Management ports?
- A. Ports 27 - 47 are Management ports.
- B. Ports 1 - 4 are Management ports.
- C. Ports 5 - 26 are Management ports.
- D. Ports 49 - 55 are Management ports.
正解：B
解説：
Explanation
According to the Port Mapping for the Check Point Maestro HyperScale Orchestrator MHO-175 document1, ports 1 - 4 are Management ports that are used to connect the MHO to the customer's management infrastructure, such as SmartConsole or SmartDomain Manager. Ports 5 - 26 are Uplink ports that are used to connect the MHO to the customer's network infrastructure, such as switches, routers, or firewalls. Ports 27 -
47 are Downlink ports that are used to connect the MHO to the Security Group Modules (SGMs) in the Security Group. Ports 49 - 55 are Backplane ports that are used to connect the MHO to another MHO in a Dual Orchestrator environment.
References:
*Maestro Expert (CCME) Course - Check Point Software, page 42
*Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline3
*Port Mapping for the Check Point Maestro HyperScale Orchestrator MHO-1751
質問 # 53
What can be learned from the output of sx_api_ports_dump.py command?
- A. Information about downlink ports only
- B. Information about Security Groups
- C. Orchestrator port status
- D. Information about backplane bonds
正解：D
解説：
Explanation
References
*R81.20 Maestro Cheat Sheet version 7 - Check Point CheckMates, page 2
*[Maestro Expert (CCME) Course - Check Point Software], page 31
*[Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge], page 3
質問 # 54
What is the command 'asg diag' used for?
- A. Asg diag used for system diagnostics on Chassis only. It does not exist on Maestro
- B. Asg diag is used for creating traffic flow diagrams
- C. Asg diag is used for system backup
- D. Asg diag is used for system diagnostics
正解：D
解説：
Explanation
The asg diag command is used for system diagnostics on both Maestro and Chassis systems. The asg diag command can perform various tests and checks on the system components, such as hardware, software, network, clock, ARP, and more. The asg diag command can help identify and troubleshoot any issues or errors that may affect the system functionality or performance.
References =
*Check Point Maestro R81.X Administration Guide, page 66, section "asg diag" 1
*Check Point Maestro R81.X Getting Started Guide, page 28, section "asg diag" 2
*Check Point Maestro Under the Hood presentation by Lari Luoma, slide 25
1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarted/html_frame
:
https://community.checkpoint.com/fyrhh23835/attachments/fyrhh23835/maestro/1191/1/Check%20Mates%20M
質問 # 55
What Maestro component acts as a load balancer and network switch?
- A. Security Gateway Module (SGM)
- B. Maestro Hyperscale Orchestrator (MHO)
- C. Security Switching Module (SSM)
- D. Security Group (SG)
正解：B
解説：
Explanation
*The Quantum Maestro Orchestrator uses the Distribution Mode to assign incoming traffic to Security Group Members.
*Reference: Working with the Distribution Mode
質問 # 56
What command can be run to show which SGM is selected to receive traffic?
- A. g_tcpdump
- B. dxl calc
- C. asg monitor
- D. asg calc
正解：D
解説：
Explanation
The asg calc command is a tool to show which SGM is selected to receive traffic based on the distribution mode and the packet parameters. It takes the port number, the source IP, the destination IP, and optionally the source port and the destination port as arguments and returns the SGM ID and the hash value. For example, asg calc 1 10.0.0.1 20.0.0.2 1234 80 will show which SGM will receive the traffic from 10.0.0.1:1234 to
20.0.0.2:80 on port 1.
References
*Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using theCommand Line Interface and WebUI, Lesson 4.1: asg calc, page 4-5
*Check Point R81 Maestro Administration Guide, Chapter 4: Using the Command Line Interface and WebUI, Section: asg calc, page 4-5
*asg calc - Check Point Software
質問 # 57
Which command is used to set the number of sites in a Maestro environment?
- A. set maestro configuration orchestrator-site-number
- B. set maestro configuration orchestrator-site-id
- C. set maestro configuration orchestrator-site-amount
- D. set maestro orchestrator-site-amount
正解：C
解説：
Explanation
This command is used to set the number of sites in a Maestro environment, which can be either one or two.
The number of sites determines the site-sync configuration and the failover policies for the Security Groups and the Security Group Members. The default value is one, and it can be changed only before the first Security Group is created.
References =
*Maestro basic setup documentation - Page 2 - Check Point CheckMates
*Check Point R81.10 for Scalable Platforms - Check Point Software
*CHECK POINT MAESTRO EXPERT
質問 # 58
How does HyperSync work in a Dual Site environment?
- A. Each active connection has a backup connection on the second site (remote site.)
- B. Each active connection has a local backup (on the local site) and a second backup connection on each of the MHOs.
- C. Each active connection has two local backups (on the local site) and a third backup connection on the second site (remote site.)
- D. Each active connection has a local backup (on the local site) and a second backup connection on the second site (remote site.)
正解：D
解説：
Explanation
HyperSync is a feature of Maestro that enables stateful synchronization of connections and resources across different sites in a Dual Site environment. HyperSync works by creating two backup connections for each active connection: one on the same site as the active connection, and another on the remote site. This ensures that the connection can be seamlessly resumed in case of a failover event, either within the same site or across the sites. HyperSync uses the Site-Sync port and VLANs to transmit the synchronization packets between the Security Group Members and the Maestro Orchestrators.
References =
*Maestro Dual Site configuration with a direct connection through L2 switches
*Maestro Frequently Asked Questions (FAQ)
*CHECK POINT MAESTRO EXPERT
質問 # 59
What will happen in case of NAT of the traffic passing through Management network?
- A. This traffic will not pass correction, since it will be dropped
- B. This traffic will pass with no inspection
- C. Since Management traffic is always going to SMO, it will take a care for Correction Layer and will re-distribute traffic to other Appliances
- D. Orchestrator will disable NAT and traffic will pass with no issue
正解：D
解説：
Explanation
According to the Check Point MAESTRO R80.20SP Administration Manual1, NAT is not supported on the management network. If you configure NAT on the management network, the Orchestrator will disable NAT and allow the traffic to pass without translation. This is to ensure that the management traffic can reach the Security Group members and the SmartConsole without any issues.
References
*Check Point MAESTRO R80.20SP Administration Manual, page 291
質問 # 60
What command should be used for collecting diagnostic information about the orchestrator?
- A. asg perf -v
- B. cpinfo
- C. orch_info
- D. cpview
正解：B
解説：
Explanation
The cpinfo command is a tool that collects diagnostic information about the orchestrator, such as hardware, software, network, configuration, and logs. The cpinfo command generates a file that can be sent to Check Point Support for analysis and troubleshooting. The cpinfo command can be run on the orchestrator's CLI or WebUI.
References =
*Check Point Maestro R81.X Administration Guide, page 68, section "cpinfo" 1
*Check Point Maestro R81.X Getting Started Guide, page 30, section "cpinfo" 2
*Maestro Hyperscale Orchestrator Datasheet - Check Point Software 3
1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarted/html_frame
3: https://www.checkpoint.com/downloads/products/maestro-hyperscale-orchestrator-datasheet.pdf
質問 # 61
......
PDF問題（2024年最新）実際のCheckPoint 156-836試験問題：https://jp.fast2test.com/156-836-premium-file.html
問題集返金保証付きの156-836問題集には90%オフ：https://drive.google.com/open?id=13zCu-VGBrxGIdq6o2gsNUbfOtVRk8vsq