CheckPoint Check Point Certified Maestro Expert - R81 (CCME)

QUESTION NO: 1
In a Maestro Dual Site environment, what is the definition of the term Standby Site?

A. There is no such thing as an active site. In a Dual Site environment, traffic is load balanced. B. The Standby Site is the site that is not handling any traffic for the specific SG, but its connections are synced to its SGMs from the MHOs to be ready in the event of a failover. C. The Standby Site is the site currently handling the enforcement on traffic passing for a specific SG.Connections are synced within the SGMs in the Active Site. D. The Standby Site is the second site to have been defined in the process of configuring the Dual Site environment.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Maestro allows running commands globally in Expert mode by using global prefixes, such as:

A. asg all B. g_all C. global D. all

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
What is the maximum number of Appliances within Security group in Dual-Site configuration?

A. 16 B. 28 C. 31 D. 15

Correct Answer: B

QUESTION NO: 4
What is HealthCheck Point?

A. Can be used to let you visualize the Firewall topology for the SG and view live statistics, which includes throughput, problem notes, and CPU utilization. B. Performs a system health check and is meant to replace both a CPInfo and the health check script. C. Is a self-updatable suite of tools for SGMs with the capability to assess the health of the system, visualize the Firewall topology, provide a timeline of critical and informative events that might have occurred in a production system. D. Is a self-updatable suite of tools for MHOs with the capability to assess the health of the system and provide a timeline of critical and informative events that might have occurred in a production system.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
What is the purpose of g_tcpdump command?

A. The same as tcpdump, just on Scalable Platform B. Collects traffic dump from all Active Appliances within Security Group C. Collects traffic dump from Sync network D. Collects traffic dump from CIN network

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Where should sx_api_ports_dump.py command be ran?

A. Orchestrator B. SMO Appliance C. Management server D. Security Group

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
What command should be used for collecting diagnostic information about the orchestrator?

A. cpview B. cpinfo C. orch_info D. asg perf -v

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
At a minimum, how many management and Uplink ports does a SG require?

A. Only one of the two interfaces is needed for the Security Group. B. Two of each. C. One each. D. Neither are required.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
What cannot be a reason for "Failed to get remote orchestrator interfaces" error message, when clicking on
"Orchestrator" in WebUI

A. Remote orchestrator has no empty interfaces B. No Sync between orchestrators C. One orchestrator only, but Orchestrator amount is 2 or no Sync in between orchestrators D. Single orchestrator environment, but configured Orchestrator amount is 2

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

CheckPoint Check Point Certified Maestro Expert - R81 (CCME) - 156-836 Exam Questions