HealthCheck Point (HCP) is a tool that can perform various tests and checks on the system components of the Security Group Modules (SGMs), such as hardware, software, network, clock, ARP, and more. It can also display the performance statistics of the SGMs, such as throughput, packet rate, CPU utilization, memory usage, and more. Additionally, HCP can provide a graphical representation of the Firewall topology for the Security Group, showing the connections and statuses of the SGMs and the Orchestrators. Furthermore, HCP can generate a report of the critical and informative events that occurred on the system, such as configuration changes, errors, warnings, and alerts. HCP can help identify and troubleshoot any issues or errors that may affect the system functionality or performance. References = *HealthCheck Point (HCP) Release Updates - Check Point Software 1 *Professional Services Healthcheck - Check Point Software 2 *HealthCheck Point - Check Point CheckMates 3
Question 52
The core four manual diagnostic tools include: asg diag verify, asg perf -v, orch_stat -all, and
Correct Answer: D
Explanation "Asg stat -v" could be a part of the core diagnostic tools, providing valuable statistics and information for manual diagnostics. References = *Maestro Expert (CCME) Course - Check Point Software 3 *Check Point Maestro R81.X Administration Guide 1 *Check Point Maestro R81.X Getting Started Guide 2 3: https://www.checkpoint.com/downloads/training/ccme-maestro-expert-r81.10-course.pdf 1: https://www.manualslib.com/manual/2031661/Check-Point-Maestro-R80-20sp.html 2: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_GettingStarted/html_frame
Question 53
Maestro allows running commands globally in Expert mode by using global prefixes, such as:
Correct Answer: B
The g_all prefix is used to run commands globally in Expert mode on all Security Group Members of the current Security Group. For example, g_all cpstop will stop the Check Point services on all SGMs. The other prefixes are not valid for global commands in Expert mode. References *Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 4: Using the Command Line Interface and WebUI, Lesson 4.3: Global Commands, page 4-11 *Check Point R81 Maestro Administration Guide, Chapter 4: Using the Command Line Interface and WebUI, Section: Global Commands, page 4-9 *Global Expert Mode Commands - Check Point CheckMates
Question 54
During an upgrade, Is Multi-Version Clustering (MVC) supported?
Correct Answer: D
Explanation Multi-Version Clustering (MVC) is a feature that allows different versions of Security Gateways to operate in the same cluster and provide seamless failover and load balancing. MVC is supported for Maestro environments as of R81, which means that it is possible to upgrade the Security Groups in a Maestro environment as a Multi-Version Cluster with zero downtime. This requires that the Maestro Orchestrators are upgraded to R81.20 first, and then the Security Groups can be upgraded one by one to R81.20 while maintaining full connectivity and synchronization. References = *Check Point R81.20 for Scalable Platforms - Check Point Software *Maestro Dual Site configuration with a direct connection through L2 switches *CHECK POINT MAESTRO EXPERT
