Checkpoint 156-836 Practice Test - Questions Answers, Page 7

Reference =

* [Maestro Frequently Asked Questions (FAQ)]

* Maestro Dual Site configuration with a direct connection through L2 switches

* Dual Site Single Maestro Hyperscale Orchestrator Cluster (Dual Site Single MHO Redundancy)

* CHECK POINT MAESTRO EXPERT

HyperSync is a feature of Maestro that enables stateful synchronization of connections and resources across different sites in a Dual Site environment. HyperSync works by creating two backup connections for each active connection: one on the same site as the active connection, and another on the remote site. This ensures that the connection can be seamlessly resumed in case of a failover event, either within the same site or across the sites. HyperSync uses the Site-Sync port and VLANs to transmit the synchronization packets between the Security Group Members and the Maestro Orchestrators.

Reference =

* Maestro Dual Site configuration with a direct connection through L2 switches

* Maestro Frequently Asked Questions (FAQ)

* CHECK POINT MAESTRO EXPERT

A Dual Site setup can have either two or four orchestrators, depending on the scenario. However, the maximum number of orchestrators per Security Group is four, regardless of the number of sites. This is because each Security Group can have up to two orchestrators on each site, and each site can have up to two orchestrators. Therefore, the maximum number of orchestrators in a Dual Site setup is four per Security Group.

Reference =

* Maestro Frequently Asked Questions (FAQ)

* Maestro Dual Site configuration with a direct connection through L2 switches

* Dual Site Single Maestro Hyperscale Orchestrator Cluster (Dual Site Single MHO Redundancy)

The Pre-Upgrade Verifier is a tool that checks the compatibility and readiness of the Maestro environment for the upgrade process. It verifies the current version, the target version, the hardware requirements, the configuration settings, and the license validity of the Maestro Orchestrators and the Security Groups. It also identifies any potential issues or risks that might affect the upgrade and provides recommendations on how to resolve them. The Pre-Upgrade Verifier should be run before importing the R81.10 software package and before performing the actual upgrade.

Reference =

* Check Point R81.10 for Scalable Platforms - Check Point Software

* CHECK POINT MAESTRO EXPERT

This is the correct answer because it follows the upgrade order and procedure specified in the R81.10 and R81.20 Administration Guides for Maestro environments. The MHOs are responsible for managing and synchronizing the SGMs, so they must be upgraded to the target version before the SGMs. However, the SGMs can be upgraded one by one or in batches, as long as they are compatible with the MHOs. The upgrade process also supports Multi-Version Clustering, which allows different versions of SGMs to operate in the same Security Group with zero downtime.

Reference =

* Check Point R81.10 for Scalable Platforms - Check Point Software

* Check Point R81.20 for Scalable Platforms - Check Point Software

* CHECK POINT MAESTRO EXPERT

Reference

* Maestro R80.30SP Jumbo Hotfix Accumulator, Section: Important Notes

* Check Point Maestro R80.30SP with Gaia 3.10, Section: Known Limitations

* Check Point SNMP MIB files, Section: Revision History

The Orchestrator is a device that connects multiple security gateways into a unified system, called a security group. It manages the configuration, policy, software, and routing of the security group, and distributes the network traffic among the security gateways using a load-balancing algorithm. It also acts as a network switch for the internal and external networks.

Reference=Maestro Hyperscale Orchestrator Datasheet - Check Point Software,Check Point Maestro Hyperscale Network Security,7 Reasons to Use Check Point Maestro and ... - Check Point Software