156-836 Exam Questions and Answers | Exam-Dumps (Page: 2)

QUESTION: 6

What is a security group?

A solution for Security Gateway redundancy and Load Sharing.
A set of appliances of the same model that are collectively managed by the MHO.
A set of network interfaces and individual SGMs assigned to a logical group.
A set of objects in SmartConsole that are responsible for enforcing an access policy.

Answer(s): A

Explanation:

Security groups are used to simplify management and policy enforcement across multiple devices or network segments, often offering redundancy and load balancing features

Reveal Solution Next Question

QUESTION: 7

What is the Orchestrator?

Network Switch
Manager of compute and network resources, load balancer and network switch
Load balancer
None of above

Answer(s): B

Explanation:

The Orchestrator is a Maestro component that manages the compute and network resources of the Security Group Modules (SGMs) in a Security Group. It also acts as a load balancer and a network switch, distributing traffic among the SGMs and connecting them to the customer's network infrastructure.

Reference:

- Maestro Expert (CCME) Course - Check Point Software, page 41 - Check Point Certified Maestro Expert (CCME) R81.X - Global Knowledge, course outline

Reveal Solution Next Question

QUESTION: 8

What is the Correction Layer?

Correction Layer is a daemon which corrects errors on Backplane interfaces
Correction Layer is a mechanism which handles asymmetric connections in multi-appliance system. For example, in case of NAT
Correction Layer is a mechanism which activated in case of asymmetric routing
Correction Layer is a Layer of GAIA OS which corrects misspelled commands and allows them to execute

Answer(s): B

Explanation:

The Correction Layer is a Maestro component that ensures that packets from the same connection are handled by the same Security Group Module (SGM) in a multi-appliance system. This is especially important when NAT is involved, as packets sent from the client to the server can be distributed to a different SGM than packets from the same session sent from the server to the client. The Correction Layer must then forward the packet to the correct SGM.

Reference:

- NAT and the Correction Layer on a Security Gateway - Check Point Software1 - Solved: Maestro queries - Check Point CheckMates

Reveal Solution Next Question

QUESTION: 9

What is the Correction Layer mechanism?

Ensures asymmetric traffic is handled properly, especially in the case of NAT or VPNs.
The load-balancing mechanism used by the MHO.
The MHO's distribution algorithm which determines the handling SGM for a given connection.
Enforces the access policy on the SGMs and synchronizes the enforcement verdict to other SGMs in the SG.

Answer(s): A

Explanation:

The Correction Layer mechanism is a Maestro component that ensures that packets from the same connection are handled by the same Security Group Module (SGM) in a multi-appliance system. This is especially important when NAT or VPNs are involved, as packets sent from the client to the server can be distributed to a different SGM than packets from the same session sent from the server to the client. The Correction Layer must then forward the packet to the correct SGM.

Reference:

- NAT and the Correction Layer on a VSX Gateway - Check Point Software1
- Solved: Maestro queries - Check Point CheckMates

Reveal Solution Next Question

QUESTION: 10

What is the maximum number of Appliances within Security group in Dual-Site configuration?

28
31
15
16

Answer(s): A

Reveal Solution Next Question

Checkpoint 156-836 Exam (page: 2) Checkpoint Check Point Certified Maestro Expert - R81.X Updated on: 25-Dec-2025

QUESTION: 6

Explanation:

QUESTION: 7

Explanation:

Reference:

QUESTION: 8

Explanation:

Reference:

QUESTION: 9

Explanation:

Reference:

QUESTION: 10

Checkpoint 156-836 Exam (page: 2)
Checkpoint Check Point Certified Maestro Expert - R81.X
Updated on: 25-Dec-2025