nerdexam
Check_Point

156-836 · Question #28

Layer 4 distribution is enabled by default in Maestro. Which is not a scenario when you would want to leave this enabled?

The correct answer is B. When dynamic routing protocols, such as BGP or OSPF are used. This is the correct answer because Layer 4 distribution is not recommended when dynamic routing protocols are used in Maestro. Layer 4 distribution is a feature that adds the source and/or destination ports to the distribution equation, which can improve the load balancing…

Maestro Best Practices and Security

Question

Layer 4 distribution is enabled by default in Maestro. Which is not a scenario when you would want to leave this enabled?

Options

  • AWhen there is a large number of source ports in use by protocols such as HTTP, HTTPS, and
  • BWhen dynamic routing protocols, such as BGP or OSPF are used.
  • CWhen there is a heavy imbalance of traffic between the SGMs that are members of the same SG.
  • DWhen the SG is NATing a very high percentage of traffic passing through it.

How the community answered

(23 responses)
  • A
    9% (2)
  • B
    87% (20)
  • D
    4% (1)

Explanation

This is the correct answer because Layer 4 distribution is not recommended when dynamic routing protocols are used in Maestro. Layer 4 distribution is a feature that adds the source and/or destination ports to the distribution equation, which can improve the load balancing among the SGMs. However, it can also cause issues with the correction layer, which is a mechanism that ensures the packets are processed by the correct SGM. Dynamic routing protocols, such as BGP or OSPF, use specific ports to exchange routing information and establish neighbor relationships. If Layer 4 distribution is enabled, it can interfere with the routing protocol packets and cause routing instability or failures.

Topics

#Layer 4 distribution#dynamic routing#BGP#OSPF

Community Discussion

No community discussion yet for this question.

Full 156-836 Practice