156-610 sample questions

Question 1

A Senior Security Administrator is troubleshooting a synchronization issue between the Primary and Secondary Security Management Servers in an R82 environment. The SmartConsole status indicates a 'Collision' state. Based on the architecture flow below, which action describes the correct behavior of the system to resolve this collision without administrator intervention?

Accepted Answer

The administrator must manually select which peer's changes to overwrite.

Answer

The system automatically discards changes from the Secondary server and forces a sync from the Primary.

Answer

The system merges non-conflicting changes and discards conflicting ones based on timestamps.

Answer

The Active server automatically overwrites the Standby server after a 10-minute timeout.

Question 2

Which Check Point command line tool is MOST appropriate for checking the detailed synchronization status of a Multi-Domain Security Management environment in R82?

Accepted Answer

$MDS_FWDIR/scripts/cpm_status.sh

Answer

cphaprob stat

Answer

mds_ha_status

Answer

fw ha_stat

Question 3

When configuring Management High Availability, what is the primary role of the 'Active' Management Server compared to the 'Standby' server?

Accepted Answer

The Active server is the only one that can compile and install policies to gateways.

Answer

Both servers can install policies simultaneously to different gateways.

Answer

The Active server handles logs while the Standby handles configuration changes.

Answer

There is no functional difference; both are Read/Write at all times.

Question 4

An organization requires that their R82 Management Server High Availability solution supports Global Policy assignment across three different geographical regions. Which architecture must be deployed?

Accepted Answer

Multi-Domain Security Management (MDSM) with Global Policy Management

Answer

Single Domain Security Management with distributed log servers

Answer

SmartEvent Correlation Unit in HA mode

Answer

ElasticXL Cluster with Management Data Plane Separation

Question 5

You are performing a manual promotion of a Secondary Management Server to Active status. After the promotion, you notice that the Security Gateways are still trying to fetch logs from the old Primary server. What step was likely missed?

Accepted Answer

Policy was not installed from the new Active server to update the gateways.

Answer

The gateways were not rebooted after the management failover.

Answer

The licenses were not detached from the old Primary server.

Answer

The SIC trust was not reset on the new Active server.

Question 6

In an R82 Management High Availability configuration, which TWO conditions must be met for a successful synchronization between peers? (Select TWO)

Accepted Answer

Both servers must have identical Check Point versions and build numbers.

Accepted Answer

Clock synchronization (NTP) must be configured to ensure time consistency.

Answer

Both servers must be installed on the same hardware model.

Answer

Both servers must reside in the same physical subnet.

Answer

The Secondary server must be configured as a Log Server only.

Question 7

True or False: In a Management High Availability environment, if the Active server fails, the Standby server automatically promotes itself to Active and installs the policy to all gateways immediately.

Accepted Answer

False

Answer

True

Question 8

A security administrator needs to create a policy rule that allows access to an external partner's web server which changes its IP address frequently (dynamic DNS). Which Check Point object type is BEST suited for this scenario in R82 to minimize policy installs?

Accepted Answer

Domain Object (FQDN)

Answer

Network Object with Manual NAT

Answer

Dynamic Object (LSM)

Answer

Interoperable Device

Top vendors

Top exams

Free 156-610 sample questions