The core four manual diagnostic tools include: asg diag verify, asg perf -v, orch_stat -all, and
Correct Answer: D
Explanation "Asg stat -v" could be a part of the core diagnostic tools, providing valuable statistics and information for manual diagnostics. References = *Maestro Expert (CCME) Course - Check Point Software 3 *Check Point Maestro R81.X Administration Guide 1 *Check Point Maestro R81.X Getting Started Guide 2 3: https://www.checkpoint.com/downloads/training/ccme-maestro-expert-r81.10-course.pdf 1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarted/html_frame
Question 17
Possibilities for a failure in a single SGM of a Security Group include.
Correct Answer: C
Explanation One of the possible causes of a failure in a single SGM of a Security Group is that an administrator imported a hotfix into the CPUSE repository of a single SGM, instead of using the orchestrator to distribute the hotfix to all the SGMs in the Security Group. This can create a mismatch in the software versions and configurations of the SGMs, and lead to unexpected behavior and errors. References *Maestro Expert (CCME) Course - Check Point Software, page 251 *sk172923: The /var/log/messages file does not save Maestro Gaia Clish commands2 *sk180418: Security Gateway Member (SGM) is stuck after it is added to a Security Group with image auto cloning enabled on the Single Management Object (SMO)
Question 18
What is the purpose of g_tcpdump command?
Correct Answer: D
Explanation _tcpdump" probably collects traffic dumps from all active appliances within a security group, aligning with the naming convention and function of similar commands in scalable platforms. References *Maestro Expert (CCME) Course - Check Point Software, page 331 *What is 'IN' and 'OUT' of g_tcpdump? - Check Point CheckMates2 *CHECK POINT MAESTRO EXPERT, page 23
Question 19
What cannot be learned from the output of asg monitor command?
Correct Answer: C
Explanation The asg monitor command is a tool to display the status and statistics of the Maestro Security Group Members and the Orchestrators. It shows information such as uptime, port status, CPU usage, memory usage, traffic distribution, and appliances cluster status. However, it does not show the security policy status, such as the policy name, installation time, or revision. To view the security policy status, other commands such as asg policy or fw stat can be used. References *Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.1: asg monitor, page 4-3 *Check Point R81 Maestro Administration Guide, Chapter 4: Using the Command Line Interface and WebUI, Section: asg monitor, page 4-3 *asg monitor - Check Point Software
Question 20
What can be learned from the output of sx_api_ports_dump.py command?
Correct Answer: A
Explanation References *R81.20 Maestro Cheat Sheet version 7 - Check Point CheckMates, page 2 *[Maestro Expert (CCME) Course - Check Point Software], page 31 *[Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge], page 3
