Check Point Certified Security Administrator (CCSA) R80 — Question 125

There are two Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby.
Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational. When it re-joins the cluster, will it become active automatically?

Answer options

• A. No, since ג€maintain current active cluster memberג€ option on the cluster object properties is enabled by default
• B. No, since ג€maintain current active cluster memberג€ option is enabled by default on the Global Properties
• C. Yes, since ג€Switch to higher priority cluster memberג€ option on the cluster object properties is enabled by default
• D. Yes, since ג€Switch to higher priority cluster memberג€ option is enabled by default on the Global Properties

Correct answer: A

Explanation

The correct answer is A because the 'maintain current active cluster member' option being enabled by default prevents FW_A from automatically becoming active again after it rejoins the cluster. Options B, C, and D are incorrect as they either reference the Global Properties or incorrectly suggest that FW_A will take over automatically despite the current active member setting.