nerdexam
Check_Point

156-215.80 · Question #189

What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

The correct answer is A. degrades performance as the Security Policy grows in size. In a Standalone deployment, the Security Management Server and Security Gateway run on the same appliance, sharing resources. As the Security Policy grows, this shared resource model causes performance degradation.

Deployment and Configuration

Question

What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

Options

  • Adegrades performance as the Security Policy grows in size
  • Brequires additional Check Point appliances
  • Crequires additional software subscription
  • Dincreases cost

How the community answered

(38 responses)
  • A
    89% (34)
  • B
    3% (1)
  • C
    3% (1)
  • D
    5% (2)

Why each option

In a Standalone deployment, the Security Management Server and Security Gateway run on the same appliance, sharing resources. As the Security Policy grows, this shared resource model causes performance degradation.

Adegrades performance as the Security Policy grows in sizeCorrect

In a Standalone deployment, both the management and enforcement functions run on a single device. As Security Policy size increases, the policy compilation and enforcement overhead compete for the same CPU and memory, directly degrading gateway throughput and management performance. A Distributed deployment avoids this by placing the Security Management Server on a dedicated appliance.

Brequires additional Check Point appliances

Standalone requires fewer appliances than Distributed - it consolidates both roles onto one device, not more.

Crequires additional software subscription

There is no additional software subscription required for Standalone versus Distributed deployment; the licensing model does not change based on this topology choice.

Dincreases cost

Standalone is generally less expensive than Distributed because fewer hardware appliances are needed, so cost is not a drawback of Standalone.

Concept tested: Check Point Standalone vs Distributed deployment trade-offs

Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_GettingStarted_Guide/Topics-GSG/Deployment-Considerations.htm

Topics

#Standalone deployment#Distributed deployment#performance#deployment options

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice