156-215.80 · Question #346
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.
The correct answer is B. Failovers. In a Check Point Active-Active cluster, SDF (Sticky Decision Function) ensures that connections are bound to a specific cluster member to prevent mid-session handoffs that would disrupt active connections.
Question
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.
Options
- ASymmetric routing
- BFailovers
- CAsymmetric routing
- DAnti-Spoofing
How the community answered
(22 responses)- A5% (1)
- B82% (18)
- C9% (2)
- D5% (1)
Why each option
In a Check Point Active-Active cluster, SDF (Sticky Decision Function) ensures that connections are bound to a specific cluster member to prevent mid-session handoffs that would disrupt active connections.
Symmetric routing is the desired outcome that SDF helps maintain - it is not something SDF prevents.
SDF assigns each connection to a specific cluster member and keeps it 'sticky' to that member for the duration of the session. Without SDF, packets belonging to the same session could be routed to different cluster members in an Active-Active setup, causing state mismatches and triggering connection-level failovers that drop active sessions.
While SDF promotes routing consistency, the mechanism's specific role in Active-Active clusters is to prevent mid-session connection failovers between members, not to be labeled generically as asymmetric routing prevention.
Anti-Spoofing is a separate enforcement feature that validates packet source addresses against interface topology and has no relation to SDF's cluster session-binding function.
Concept tested: Check Point Active-Active cluster Sticky Decision Function
Source: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_ClusterXL_AdminGuide/Content/Topics-CXLAG/SDF.htm
Topics
Community Discussion
No community discussion yet for this question.