Check Point Certified Security Expert (CCSE) R80 — Question 285

There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational.
When it re-joins the cluster, will it become active automatically?

Answer options

• A. No, since 'maintain' current active cluster member' option on the cluster object properties is enabled by default.
• B. No, since 'maintain' current active cluster member' option is enabled by default on the Global Properties.
• C. Yes, since 'Switch to higher priority cluster member' option on the cluster object properties is enabled by default.
• D. Yes, since 'Switch to higher priority cluster member' option is enabled by default on the Global Properties.

Correct answer: A

Explanation

The correct answer is A because the 'maintain current active cluster member' option is enabled by default, which means that FW_A will not automatically take back the active role even though it has a higher priority. Option B is incorrect as it refers to Global Properties, which does not affect this specific scenario. Options C and D are also incorrect because they assume that FW_A will regain its active status automatically, which is not the case due to the configured settings.