156-835 · Question #3
What is the throughput penalty of Security Group?
The correct answer is D. 1% per member. See the full explanation below for the reasoning.
Question
What is the throughput penalty of Security Group?
Options
- A5% per member
- BDepends on the type of Appliance
- C10% per Security Group with no relation to amount of members
- D1% per member
How the community answered
(44 responses)- A5% (2)
- B9% (4)
- C2% (1)
- D84% (37)
Community Discussion
3The correct answer is D, 1% per member. In production environments with Security Groups, each member added to the group introduces a small but measurable overhead because traffic has to be inspected across every member policy, and that per-member cost is what Check Point documents as the 1% figure rather than a flat group penalty or an appliance-dependent variable.
Option A tries to trick you with "5%" but the real tax is 1% per member, so D wins.
The 1% per member figure is the one you want to lock in for the exam, so D is your answer here. When you add members to a Security Group, does the throughput degradation scale linearly all the way up regardless of how large the group gets, or is there a ceiling where the penalty stops accumulating?