Free 156-836 Practice Test Questions 2026

The core four manual diagnostic tools include:

asg diag verify, asg perf -v, orch_stat -all, and

A. asg diag verify

B. cpinfo

C. hcp -r all

D. asg stat -v

HealthCheck Point _____

A. is a self-updatable suite of tools for MHOs with the capability to assess the health of the system and provide a timeline of critical and informative events that might have occurred in a production system.

B. performs a system health check and is meant to replace both a CPInfo and the health check script.

C. can be used to let you visualize the Firewall topology for the SG and view live statistics, which includes throughput, problem notes, and CPU utilization.

D. is a self-updatable suite of tools for SGMs with the capability to assess the health of the system, visualize the Firewall topology, provide a timeline of critical and informative events that might have occurred in a production system.

Which feature is used to force trusted non-F2F traffic into the fully accelerated path for handling by SecureXL.

A. Fast Accelerator

B. hypersync

C. rate limiting

D. SecureXL

When security policy is installed

A. All SGMs receive the security policy and one by one performs an independent policy verification. Then, all SGMs simultaneously install the policy.

B. The SMO Master receives the policy and performs a policy verification the policy is installed on the SMO Master, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master, then the non-SMO Master SGMs install the policy.

C. All SGMs receive the security policy and simultaneous policy installation occurs.

D. The policy is installed on the SMO, the SMO Master broadcasts the available package, other members retrieve the new policy from the SMO Master and perform an independent policy verification, then the non-SMO Master SGMs install the policy.

What can be learned from the output of sx_api_ports_dump.py command?

A. Information about backplane bonds

B. Information about Security Groups

C. Orchestrator port status

D. Information about downlink ports only

Multiple SGs can exist in a Dual Site environment. Each SG can be configured in one of three ways. Which is not one of those ways?

A. Two MHOs connected to two MHOs via load balancers.

B. Two MHOs at same site connected to remote site MHOs via two different switches.

C. Two MHOs at same site connected to remote site MHOs via single switch.

D. Direct connectivity between Remote Site MHOs.2

Which command do you use to find bottlenecks in the system that are affecting performance, even functionality in some cases?

A. asg stat -v

B. asg diag verify

C. asg perf -v

D. asg monitor

What does the lldpctl command do?

A. Show all devices discovered by LLDP protocol on downlink ports

B. Show all devices discovered by LLDP protocol on all ports

C. Discover orchestrators

D. Show all devices discovered by LLDP protocol on uplink ports

Do all MHOs need to be upgraded before starting the SGM upgrades?

A. During the upgrade process all SGMs should be upgraded before upgrading all of the MHOs.

B. A minimum of one of the MHOs should be upgraded before starting the SGM upgrades. However, there is no requirement to upgrade all the SGMs during the same maintenancewindow as the MHO

C. All MHOs must first be upgraded before starting the SGM upgrades However, there is no requirement to upgrade all the SGMs during the same maintenance window as the MHOs.

D. MHOs do not need to be upgraded at all because Maestro supports the use of different versions between the MHOs and SGMs.

What is HealthCheck Point?

A. Is a self-updatable suite of tools for MHOs with the capability to assess the health of the system and provide a timeline of critical and informative events that might have occurred in a production system.

B. Performs a system health check and is meant to replace both a CPInfo and the health check script.

C. Can be used to let you visualize the Firewall topology for the SG and view live statistics, which includes throughput, problem notes, and CPU utilization.

D. Is a self-updatable suite of tools for SGMs with the capability to assess the health of the system, visualize the Firewall topology, provide a timeline of critical and informative events that might have occurred in a production system.

How many orchestrators may Dual-Site include?

A. 2 or 4

B. 2

C. 1

D. Only 4

Layer 4 distribution is enabled by default in Maestro. Which is not a scenario when you would want to leave this enabled?

A. When there is a large number of source ports in use by protocols such as HTTP, HTTPS, and DNS.

B. When dynamic routing protocols, such as BGP or OSPF are used.

C. When there is a heavy imbalance of traffic between the SGMs that are members of the same SG.

D. When the SG is NATing a very high percentage of traffic passing through it.