The _______ command will allow users to update the specified file on all SGMs.
Correct Answer: A
Explanation The g_update_conf_file command is a global command that allows users to update the specified file on all Security Group Members of the current Security Group. The command takes the file name and the parameter-value pair as arguments and updates the file accordingly. For example, g_update_conf_file fwkern.conf fwha_enable_arp=1 will add or modify the fwha_enable_arp parameter in the fwkern.conf file on all SGMs. References *Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.3: Global Commands, page 4-12 *Check Point R81 Maestro Administration Guide, Chapter 4: Using the Command Line Interface and WebUI, Section: Global Commands, page 4-10 *Maestro Commands for Security Groups - Check Point CheckMates
Question 42
There are two appliances within the same Security Group. One of them is connected by One downlink only, another one by Two downlinks. Assuming there's no NAT and no VPN, what would be proportion of traffic distribution done by Orchestrator?
Correct Answer: A
Question 43
What is the command 'asg diag' used for?
Correct Answer: C
Explanation The asg diag command is used for system diagnostics on both Maestro and Chassis systems. The asg diag command can perform various tests and checks on the system components, such as hardware, software, network, clock, ARP, and more. The asg diag command can help identify and troubleshoot any issues or errors that may affect the system functionality or performance. References = *Check Point Maestro R81.X Administration Guide, page 66, section "asg diag" 1 *Check Point Maestro R81.X Getting Started Guide, page 28, section "asg diag" 2 *Check Point Maestro Under the Hood presentation by Lari Luoma, slide 25 1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarted/html_frame : https://community.checkpoint.com/fyrhh23835/attachments/fyrhh23835/maestro/1191/1/Check%20Mates%20M
Question 44
Complete the sentence: Dual Orchestrators work as.______
Correct Answer: B
Dual Orchestrators work as an Active-Active cluster, which means that both Orchestrators are active and share the load of the traffic that is sent to and from the Security Group Members (SGMs). Active-Active cluster provides better performance and scalability than Active-Standby cluster, which only uses one Orchestrator at a time and keeps the other as a backup. Active-Active cluster also allows for faster failover and recovery in case of an Orchestrator failure, as the surviving Orchestrator can take over the traffic without interruption. References *Maestro Expert (CCME) Course - Check Point Software, page 25 *CheckPoint Certified Maestro Expert (CCME) - Skillzcafe, page 2 *Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, page 2
Question 45
How many orchestrators may Dual-Site include?
Correct Answer: A
Explanation A Dual Site environment can include either two or four orchestrators, depending on the scenario. There are three primary scenarios for Dual Site configuration: *Direct connectivity between remote site orchestrators: This scenario requires two orchestrators, one for each site, and a direct connection between them using the site-sync port. *Two orchestrators on the same site are connected to the remote site orchestrators through two different switches: This scenario requires four orchestrators, two for each site, and a connection between them using the site-sync port and two external switches that support QinQ and MTU increment. *Two orchestrators on the same site are connected to the remote site orchestrators through one switch: This scenario also requires four orchestrators, two for each site, and a connection between them using the site-sync port and one external switch that supports QinQ and MTU increment. References = *Maestro Dual Site configuration with a direct connection through L2 switches *Dual Site Single Maestro Hyperscale Orchestrator Cluster (Dual Site Single MHO Redundancy) *Maestro Frequently Asked Questions (FAQ)
