156-836 Online Practice Questions

Home / Check Point / 156-836

Latest 156-836 Exam Practice Questions

The practice questions for 156-836 exam was last updated on 2025-05-01 .

Viewing page 1 out of 6 pages.

Viewing questions 1 out of 33 questions.

Question#1

There are two appliances within the same Security Group. One of them is connected by One downlink only, another one by Two downlinks.
Assuming there's no NAT and no VPN, what would be proportion of traffic distribution done by Orchestrator?

A. 100%/0%
B. 33%/66%
C. 50%/50%
D. 66%/33%

Question#2

The core four manual diagnostic tools include:
asg diag verify, asg perf -v, orch_stat -all, and

A. asg diag verify
B. cpinfo
C. hcp -r all
D. asg stat -v

Explanation:
"Asg stat -v" could be a part of the core diagnostic tools, providing valuable statistics and information for manual diagnostics.
Reference =
• Maestro Expert (CCME) Course - Check Point Software 3
• Check Point Maestro R81.X Administration Guide 1
• Check Point Maestro R81.X Getting Started Guide 2
3: https://www.checkpoint.com/downloads/training/ccme-maestro-expert-r81.10-course.pdf 1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2 :
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarte d/html_frameset.htm

Question#3

Which command should be used to restart Orchestrator service only?

A. orchd restart
B. reboot
C. service orchestrator restart
D. cpstop; cpstart

Explanation:
Page 313 from the training manual:
- Restart the service: orchd restart
- Restart the service without confirmation service orchd restart

Question#4

There is a Security group of 10 Appliances and all of them are up and running.
How many Appliances within a Security Group keep the same connection in its connection table in case of NAT?

A. Between 2 and 4
B. All 10
C. 2
D. 3

Explanation:
Reference =
• Check Point Maestro R81.X Administration Guide, page 64, section “Correction Layer” 1
• Check Point Maestro R81.X Getting Started Guide, page 26, section “Correction Layer” 2
• Check Point Maestro Under the Hood presentation by Lari Luoma, slide 23
• Check Point Maestro Frequently Asked Questions (FAQ), question 9
1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html
2: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarte d/html_frameset.htm:
https://community.checkpoint.com/fyrhh23835/attachments/fyrhh23835/maestro/1191/1/Check%2 0Mates%20Maestro%20under%20the%20hood%202022.pptx:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails =&solutionid=sk147853&partition=Basic&product=Maestro

Question#5

What will happen in case of NAT of the traffic passing through Management network?

A. This traffic will not pass correction, since it will be dropped
B. Orchestrator will disable NAT and traffic will pass with no issue
C. Since Management traffic is always going to SMO, it will take a care for Correction Layer and will re-distribute traffic to other Appliances
D. This traffic will pass with no inspection

Explanation:
According to the Check Point MAESTRO R80.20SP Administration Manual1, NAT is not supported on the management network. If you configure NAT on the management network, the Orchestrator will disable NAT and allow the traffic to pass without translation. This is to ensure that the management traffic can reach the Security Group members and the SmartConsole without any issues.
Reference
• Check Point MAESTRO R80.20SP Administration Manual, page 291

Exam Code: 156-836Q & A: 94 Q&AsUpdated:  2025-05-01

 Get All 156-836 Q&As