When a failed cluster member recovers, which of the following actions is NOT taken by the
recovering member?
A.
It will not check for any updated policy and load the last installed policy with a warning message
indicating that the Security Policy needs to be installed from the Security Management Server.
B.
It will try to take the policy from one of the other cluster members.
C.
It compares its local policy to the one on the Security Management Server.
D.
If the Security Management Server has a newer policy, it will be retrieved, else the local policy
will be loaded.
A
Answer A:
https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm
How a Recovered Cluster Member Obtains the Security Policy
The administrator installs the security policy on the cluster rather than separately on individual cluster members. The policy is automatically installed on all cluster members. The policy is sent to the IP address defined in the General Properties page of the cluster member object.
When a failed cluster member recovers, it will first try to take a policy from one of the other cluster members. The assumption is that the other cluster members have a more up to date policy. If this does not succeed, it compares its own local policy to the policy on the Security Management server. If the policy on the Security Management server is more up to date than the one on the cluster member, the policy on the Security Management server will be retrieved. If the cluster member does not have a local policy, it retrieves one from the Security Management server. This ensures that all cluster members use the same policy at any given moment.
A. It will not check for any updated policy and load the last installed policy with a warning message indicating that the Security Policy needs to be installed from the Security Management Server.