156-836 practice question 14 of 15

What happens when you make changes from Clish on the SMO Master?

Full set: 88 questions
Answer options
A: The changes are synchronized to the SMS/MDS as a backup.
B: The changes are synchronized to the MHO as a backup.
C: Changes are only applied on the SMO Master. Correct answer
D: Changes are applied to all members in the SG.
Correct Answer:
C. Changes are only applied on the SMO Master.
Explanation

Check Point Maestro provides two command-line shells: clish and gclish (Global Clish). The standard clish shell is used to make configuration changes that are local to the specific appliance you are logged into, even if that appliance is the SMO Master. Changes made in clish are not automatically synchronized to other members of the Security Group. To apply a command to all members of the Security Group simultaneously from the SMO Master, the gclish shell must be used. The question specifically asks about Clish.

Why Incorrect

A. The SMO does not synchronize its local configuration to the SMS/MDS as a backup; the management flow is typically from the SMS to the gateways.
B. The MHOs are orchestrators, not members of the Security Group that the SMO Master belongs to. Configuration is synchronized among SG members.
D. This describes the behavior of the gclish (Global Clish) shell, not the standard clish shell mentioned in the question.

References

- Check Point. (2022). Maestro Hyperscale Orchestrator R81.10 Administration Guide. p. 99, Section: "Working with Clish". The documentation states, "When you run a command in Clish on a specific Security Group Member, Maestro applies the command only to that specific Security Group Member."

- Check Point. (2022). Maestro Hyperscale Orchestrator R81.10 Administration Guide. p. 100, Section: "Working with gClish". This section contrasts with clish by stating, "When you run a command in gClish on the SMO Master, Maestro applies the command to all Security Group Members."

Scroll to Top