Real IT Certification Exams Questions & Dumps | Get Certified with CertQuestionsBank.com

Latest 156-836 Exam Practice Questions

The practice questions for 156-836 exam was last updated on 2026-02-24 .

Viewing page 1 out of 2 pages.

Viewing questions 1 out of 13 questions.

Question#1

When a VPN tunnel is formed with a Maestro SGM,

A. The receiving SGM makes an encryption decision. The SGM then syncs the traffic to two backup SGMs: one for clear traffic and one for encrypted traffic.

B. SGM 1 analyzes the policy and topology. If encryption is required, it calculates the tunnel owner's IP address. SGM 1 sends a clear packet to the tunnel owner. SGM 2 is now the connection and tunnel owner.

C. The MHO handles the IKE before distributing the traffic to a SGM to handle all encrypted traffic. This helps to prevent any issues with the correction layer.

D. The MHO distributes copies of the packets to two different SGMs because SGM 1 will handle the clear traffic IKE exchange packets, while SGM2 handles encrypted packets.

Question#2

Is it possible to define distribution mode per interface?

A. Yes, only for downlink interfaces

B. No, only for the Security Group

C. Yes, only for uplink interfaces

D. Yes, for both uplink and downlink interfaces

Explanation:
Maestro allows you to define the distribution mode per interface, which determines how traffic is distributed among the Security Group Modules (SGMs) in a Security Group. You can configure the distribution mode for each interface individually, or use the default mode for all interfaces. The distribution mode can be set for both uplink and downlink interfaces.
Reference =
• Check Point Maestro R81.X Administration Guide, page 62, section “Distribution Mode” 1
• Check Point Maestro R81.X Getting Started Guide, page 25, section “Distribution Mode” 2 1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2 :
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarte d/html_frameset.htm

Question#3

What type of cluster can a Security Group can be compared to?

A. Load Sharing Active / Active

B. VSLS

C. Active / Backup

D. Active / Standby

Question#4

How does HyperSync work in a Dual Site environment?

A. Each active connection has two local backups (on the local site) and a third backup connection on the second site (remote site.)

B. Each active connection has a backup connection on the second site (remote site.)

C. Each active connection has a local backup (on the local site) and a second backup connection on the second site (remote site.)

D. Each active connection has a local backup (on the local site) and a second backup connection on each of the MHOs.

Explanation:
HyperSync is a feature of Maestro that enables stateful synchronization of connections and resources across different sites in a Dual Site environment. HyperSync works by creating two backup connections for each active connection: one on the same site as the active connection, and another on the remote site. This ensures that the connection can be seamlessly resumed in case of a failover event, either within the same site or across the sites. HyperSync uses the Site-Sync port and VLANs to transmit the synchronization packets between the Security Group Members and the Maestro Orchestrators.
Reference =
• Maestro Dual Site configuration with a direct connection through L2 switches
• Maestro Frequently Asked Questions (FAQ)
• CHECK POINT MAESTRO EXPERT

Question#5

Which distribution mode assigns packets to an SGM based solely on the packet destination IP?

A. User mode

B. Manual mode

C. Network mode

D. Auto-topology mode

Explanation:
Network mode is the distribution mode that assigns packets to an SGM based solely on the packet destination IP. In this mode, the Orchestrator uses a hash function to map each destination IP to a specific SGM. This mode ensures that all packets with the same destination IP are processed by the same SGM, regardless of the source IP or port. This mode is suitable for scenarios where the destination IP is the main factor for load balancing, such as NAT or VPN.
Reference
• Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.4: Traffic Flow, page 2-19
• Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section: Traffic Distribution, page 2-7
• Maestro basic setup documentation - Page 2 - Check Point CheckMates

Disclaimer

This page is for educational and exam preparation reference only. It is not affiliated with Check Point, CCME, or the official exam provider. Candidates should refer to official documentation and training for authoritative information.

Exam Code: 156-836Q & A: 94 Q&AsUpdated: 2026-02-24

Get All 156-836 Q&As

156-836 Online Practice Questions

Question#1

Question#2

Question#3

Question#4

Question#5

Top 20 Exams

Important Links

Know Us

Follow Us

Payment Methods