ExamGecko
Home / Checkpoint / 156-836 / Practice Test 2
Ask Question

Checkpoint 156-836 Practice Test 2

00:00:00
Show Answer
Report Issue   Restart test

Question 1 / 40

What is the default Distribution mode?

Auto-topology
Auto-topology
User
User
Manual-General
Manual-General
Network
Network
Comment (0)
Suggested answer: A
Explanation:

Auto-topology is the default distribution mode for Maestro Security Groups. In this mode, the Orchestrator assigns packets to a Security Group Member based on the topology of the port defined in the gateway object. Each port is either in user mode or network mode depending on the topology. User mode means that the port is connected to the internal network and network mode means that the port is connected to the external network. The Orchestrator uses a hash function to map each source IP or destination IP to a specific SGM, depending on the mode of the port. This mode ensures that all packets with the same source IP or destination IP are processed by the same SGM, regardless of the port or protocol.

Reference

* Check Point Certified Maestro Expert (CCME) R81.X Courseware, Module 2: Maestro Security Groups, Lesson 2.4: Traffic Flow, page 2-18

* Check Point R81 Maestro Administration Guide, Chapter 2: Maestro Security Groups, Section: Traffic Distribution, page 2-7

* Lari Luoma | Lead Consultant | Maestro SME | Check Point Evangelist1, slide 16

asked 16/09/2024
John Reynolds
34 questions