156-915.77 practice questions, page 28 of 34, with answer review and explanations.
Question 136
When a failed cluster member recovers, which of the following actions is NOT taken by the recovering member?
It will try to take the policy from one of the other cluster members.
It will not check for any updated policy and load the last installed policy with a warning message indicating that the Security Policy needs to be installed from the Security Management Server.
If the Security Management Server has a newer policy, it will be retrieved, else the local policy will be loaded.
It compares its local policy to the one on the Security Management Server.
Question 137
Organizations are sometimes faced with the need to locate cluster members in different geographic locations that are distant from each other. A typical example is replicated data centers whose location is widely separated for disaster recovery purposes. What are the restrictions of this solution?
There are no restrictions.
There is one restriction: The synchronization network must guarantee no more than 150 ms latency (ITU Standard G.114).
There is one restriction: The synchronization network must guarantee no more than 100 ms latency.
There are two restrictions: 1. The synchronization network must guarantee no more than 100ms latency and no more than 5% packet loss. 2.The synchronization network may only include switches and hubs.
Question 138
You are the Mega Corp Security Administrator. This company uses a firewall cluster, consisting of two cluster members. The cluster generally works well but one day you find that the cluster is behaving strangely. You assume that there is a connectivity problem with the cluster synchronization cluster link (cross-over cable). Which of the following commands is the best for testing the connectivity of the crossover cable?
telnet <IP address of the synchronization interface on the other cluster member>
ifconfig -a
ping <IP address of the synchronization interface on the other cluster member>
arping <IP address of the synchronization interface on the other cluster member>
Question 139
You have a High Availability Cluster XL configuration. Machines are not synchronized. What happens to connections on failover?
Connections cannot be established until cluster members are fully synchronized.
It is not possible to configure High Availability that is not synchronized.
Old connections are lost but can be reestablished.
Old connections are lost but are automatically recovered whenever the failed machine recovers.
Question 140
What command will allow you to disable sync on a cluster firewall member?