Free 156-836 Practice Test Questions 2026

What cannot be learned from the output of lldpctl?

A. Serial number of Appliance

B. Appliance model

C. Distribution mode

D. Orchestrator's IP

To display processes that are consuming excessive system resources, users should use the_____ command.

A. asg perf -v

B. asg stat -v

C. top

D. asg_perf_hogs

A splitter cannot be used:

A. To connect a single port on an Orchestrator to the same Appliance

B. To connect a single port on an Orchestrator to multiple ports on an external switch

C. To connect a single port on an Appliance to multiple ports on the Orchestrator

D. To connect a single port on an Orchestrator to multiple Appliances

What is an uplink interface used for?

A. To connect in between appliances

B. To connect appliances to customer's infrastructure

C. To connect Orchestrators to customer’s infrastructure

D. To connect in between Orchestrators

What is the difference between Dual-Site and Dual-Room?

A. Dual-Room is a kind of Dual-Site deployment within the same building

B. Dual-Room is Active / Standby and Dual-Site is Active / Active

C. Dual-Room is a Single-Site deployment where all Appliances are connected to both orchestrators

D. They are the same

When working with Maestro, what is the difference between using Clish and gClish?

A. Clish commands are for testing purposes only and cannot be saved, gClish commands apply to all SG members, by default.

B. Clish commands apply to all UP SG members, by default. gClish commands apply to all SG members, by default.

C. Clish commands are run on the SG members. gClish commands are run on the MHO and applied to all connected SG members in a specified group.

D. Clish commands apply only to a specific SG member. gClish commands apply to all UP SG members, by default.

When a VPN tunnel is formed with a Maestro SGM,

A. The receiving SGM makes an encryption decision. The SGM then syncs the traffic to two backup SGMs: one for clear traffic and one for encrypted traffic.

B. SGM 1 analyzes the policy and topology. If encryption is required, it calculates the tunnel owner's IP address. SGM 1 sends a clear packet to the tunnel owner. SGM 2 is now the connection and tunnel owner.

C. The MHO handles the IKE before distributing the traffic to a SGM to handle all encrypted traffic. This helps to prevent any issues with the correction layer.

D. The MHO distributes copies of the packets to two different SGMs because SGM 1 will handle the clear traffic IKE exchange packets, while SGM2 handles encrypted packets.

What cannot be a reason for "Failed to get remote orchestrator interfaces" error message, when clicking on "Orchestrator" in WebUI

A. Remote orchestrator has no empty interfaces

B. Single orchestrator environment, but configured Orchestrator amount is 2

C. One orchestrator only, but Orchestrator amount is 2 or no Sync in between orchestrators

D. No Sync between orchestrators

In a Maestro Dual Site environment, what is the definition of the term Standby Site?

A. The Standby Site is the site that is not handling any traffic for the specific SG, but its connections are synced to its SGMs from the MHOs to be ready in the event of a failover.

B. There is no such thing as an active site. In a Dual Site environment, traffic is load balanced.

C. The Standby Site is the second site to have been defined in the process of configuring the Dual Site environment.

D. The Standby Site is the site currently handling the enforcement on traffic passing for a specific SG. Connections are synced within the SGMs in the Active Site.

For the MHO-175, which ports are Management ports?

A. Ports 49 - 55 are Management ports.

B. Ports 1 - 4 are Management ports.

C. Ports 27 - 47 are Management ports.

D. Ports 5 - 26 are Management ports.

There is a Security group of 10 Appliances and all of them are up and running. How many Appliances within a Security Group keep the same connection in its connection table in case of NAT?

A. Between 2 and 4

B. All 10

C. 2

D. 3

There are two 10Gbps dual-port NIC installed on a 6800 appliance. Which interfaces should be connected to Orchestrator 1 for downlinks' intra-orchestrator redundancy when using two Orchestrators?

A. Any pair of available ports

B. Port 1 in Slot 1 and Port 1 in Slot 2

C. Port 1 in Slot 1 and Port 2 in Slot 1

D. Port 1 in Slot 2 and Port 2 in Slot 1