156-836 practice question 15 of 15

What Maestro component is automatically designated the SMO Master?

Full set: 88 questions
Answer options
A: The SGM with the lowest member ID (the first one added to the security group.) Correct answer
B: The MDS that pushes policy to the SMO is considered the SMO Master.
C: The first MHO configured is considered the SMO Master.
D: The SGM with the highest member ID (the last one added to the security group.)
Correct Answer:
A. The SGM with the lowest member ID (the first one added to the security group.)
Explanation

In a Check Point Maestro environment, the Single Management Object (SMO) represents the entire Security Group to the Security Management Server. A specific Security Group Member (SGM) is designated as the SMO Master to handle management communication. This designation is automatically and deterministically assigned to the SGM that has the lowest numerical member ID within the Security Group. If this SGM fails, the role automatically fails over to the SGM with the next lowest ID.

Why Incorrect

B. The MDS (Multi-Domain Server) is an external management component and does not participate in the SMO Master role within the Security Group.
C. The MHO (Maestro Hyperscale Orchestrator) manages the hardware and traffic distribution but is not an SGM and cannot be the SMO Master.
D. The SMO Master role is assigned based on the lowest member ID for predictable behavior, not the highest.

References

Check Point. (2023). Maestro R81.20 Administration Guide. Page 21, Section "Single Management Object (SMO)". "The Security Group Member with the lowest Member ID is the SMO Master."

Check Point. (2023). Maestro R81.10 Administration Guide. Page 20, Section "Single Management Object (SMO)". "The Security Group Member with the lowest Member ID is the SMO Master."

Scroll to Top