156-835試験問題集合格できるには更新された2023年11月テスト問題集
156-835テスト問題練習は2023年最新のに更新された66問あります
質問 # 20
What is the difference between Dual-Site and Multi-Room?
- A. Multi-Room is a kind of Dual-Site deployment within the same building
- B. This is the same
- C. Multi-Room is a Single-Site deployment where all Appliances are connected to both orchestrators
- D. Multi-Room is Active / Standby and Dual-Site is Active / Active
正解：A
質問 # 21
Which is a valid requirement for a supported Maestro appliance?
- A. Nothing special as Maestro supports any Check Point appliance
- B. 10GBps and 40Gbps or 100Gbps card with double-VLAN and LLDP support
- C. Line card with double-VLAN and LLDP support
- D. At least one 10GBps line card
正解：B
質問 # 22
Orchestrator should be defined in SmartConsole as:
- A. Security Gateway
- B. Orchestrator is not defined in SmartConsole
- C. Host
- D. Check Point host
正解：B
質問 # 23
What is the purpose of Management ports located on the Rear Panel of the Orchestrator MHO-140?
- A. 1Gbps connectivity for Security Groups.
- B. Additional ports used as uplinks.
- C. Reserved for internal purposes. Not in use.
- D. Out-of-band interfaces for access to Orchestrator itself.
正解：D
質問 # 24
Which command will be used in order to restart Orchestrator service only?
- A. reboot
- B. service orchestrator restart
- C. cpstop; cpstart
- D. orchd restart
正解：D
解説：
Page 313 from the training manual:
- Restart the service:
orchd restart
- Restart the service without confirmation
service orchd restart
質問 # 25
What is the default Distribution mode?
- A. User
- B. Manual-General
- C. Network
- D. Auto-topology
正解：D
解説：
In Check Point firewall, the default Distribution mode is Auto-topology. Auto-topology uses the built-in algorithm to automatically determine the best way to distribute the traffic across the firewall cluster, based on the topology of the network and the current load on the cluster members.
Auto-topology takes into account the available bandwidth and the CPU utilization of each cluster member, and then makes decisions on how to distribute the traffic across the cluster in real-time. It is a dynamic and adaptive mode that ensures the best use of the available resources and the highest level of performance.
質問 # 26
One single Appliance supports 1M concurrent connections. How many concurrent connections will support Security Group of 2 Appliances?
- A. 1M
- B. 2M
- C. 500K
- D. 4M
正解：B
解説：
One single Appliance supports 1M concurrent connections, so a Security Group of 2 Appliances will support 2M concurrent connections.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk91380 How to troubleshoot Gaia Portal (WebUI)
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk91380
https://downloads.checkpoint.com/dc/download.htm?ID=103853
VSX R81 Administration Guide
https://downloads.checkpoint.com/dc/download.htm?ID=103853
https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/R81.10/R81.10-List-of-all-Resolved-Issues.htm List of All Resolved Issues and New Features
https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/R81.10/R81.10-List-of-all-Resolved-Issues.htm
質問 # 27
What cannot be learned from the output of asg monitor command?
- A. Port status
- B. Appliances cluster status
- C. Security Policy status
- D. Uptime
正解：A
質問 # 28
What is the purpose of RJ-45 connectors located at the front panel of the Orchestrator MHO-170?
- A. Two Out-of-band interfaces for access to Orchestrator itself
- B. 1Gbps connectivity for Security Groups
- C. Out-of-band interface for access to Orchestrator itself and Serial Console connector
- D. Reserved for internal purposes. Not in use
正解：C
質問 # 29
There are two appliances within the same Security Group. One of them is connected by One downlink only, another one by Two downlinks. Assuming there's no NAT and no VPN, what would be proportion of traffic distribution done by Orchestrator?
- A. 100%/0%
- B. 66%/33%
- C. 50%/50%
- D. 33%/66%
正解：C
質問 # 30
What is the throughput penalty of Security Group?
- A. Depends on the type of Appliance
- B. 10% per Security Group with no relation to amount of members
- C. 5% per member
- D. 1% per member
正解：D
質問 # 31
One single Appliance supports 1M concurrent connections. How many concurrent connections will support Security Group of 2 Appliances?
- A. 1M
- B. 2M
- C. 500K
- D. 4M
正解：B
質問 # 32
What is the Iterator process?
- A. Iterator is the process that runs on the Orchestrator and calculates a distribution in case of Appliance recovery
- B. Iterator is the process that runs on the Orchestrator and calculates a distribution in case of Appliance failure
- C. Iterator is the process that simulates distribution in case of Appliance failure
- D. Iterator is the process that follow Appliance recovery and simulates what was a distribution if recovered Appliance was alive
正解：B
質問 # 33
On MHO-170 - In default configuration, what are GAIA names of Security Group Management ports?
- A. eth1-Mgmt1 and eth2-Mgmt1
- B. eth1-Mgmt1 and eth1-Mgmt3
- C. eth1-Mgmt3 and eth1-Mgmt4
- D. eth1-Mgmt1 and eth1-Mgmt2
正解：B
質問 # 34
What is the default range of physical ports for downlinks on Orchestrator MHO-170?
- A. 25 - 32
- B. 3 - 16
- C. 17 - 31
- D. 1 - 16
正解：C
質問 # 35
Which command will be used in order to restart Orchestrator service only?
- A. reboot
- B. orchd restart
- C. cpstop; cpstart
- D. service orchestrator restart
正解：D
質問 # 36
What type of cluster can a Security Group can be compared to?
- A. VSLS
- B. Load Sharing Active /Active
- C. Active / Backup
- D. Active / Standby
正解：B
質問 # 37
What is the Sync network on Appliances used for?
- A. To transfer data in case of full utilization of the downlink interfaces
- B. To transfer configuration files from Orchestrators to Appliances
- C. To synchronize configurations and connections in between connection tables of different Appliances
- D. May be used for any purpose, but synchronization always have priority
正解：C
質問 # 38
Complete the sentence: When using a Break-out cable...
- A. All tails of the break-out cable must represent uplinks
- B. Each tail of the break-out cable represent an independent port
- C. All tails of the break-out cable must represent downlinks
- D. All tails of the break-out cable must represent the same type of ports
正解：B
質問 # 39
What is the throughput penalty of Security Group?
- A. 10% per Security Group with no relation to amount of members
- B. 5% per member
- C. 1% per member
- D. Depends on the type of Appliance
正解：D
質問 # 40
There are two 10Gbps dual-port NICs and one 40Gbps NIC installed on a 23800 Appliance in slots 1, 2 and 3 accordingly. Which interfaces should be connected to Orchestrator 1 for downlinks' intra-orchestrator redundancy when using two Orchestrators?
- A. This configuration is not supported
- B. Any pair of available ports
- C. Port 1 in Slot 2 and Port 2 in Slot 1
- D. Port 1 in Slot 1 and Port 2 in Slot 1
正解：D
質問 # 41
......
正真正銘の156-835問題集には100%合格率練習テスト問題集：https://www.jpntest.com/shiken/156-835-mondaishu