Which of the following is not part of the consistency check of dual-machine hot standby?

Question

Options

• AInterface address
• BNAT configuration
• CBandwidth Policy
• DSecurity policy

• A
  13% (5)
• B
  79% (30)
• C
  3% (1)
• D
  5% (2)

Explanation

NAT configuration (B) is excluded from the dual-machine hot standby consistency check because NAT operates at the session/state level and is handled through dynamic session synchronization between devices - not through static configuration consistency verification. The consistency check focuses on configurations that must be identical for seamless failover, whereas NAT state is replicated separately in real time.

Why the distractors are wrong:

• A (Interface address) is checked because the standby device must mirror the active device's interface setup to immediately handle traffic after failover without network disruption.
• C (Bandwidth policy) is checked to ensure QoS/traffic shaping rules are consistent so the standby device enforces the same policies upon taking over.
• D (Security policy) is checked because firewall rules must be identical on both nodes - a mismatch would cause different traffic to be permitted or blocked after a switchover.

Memory tip: Think "static vs. dynamic" - the consistency check covers static configuration (addresses, policies, rules). NAT is dynamic state (session tables, mappings), which is synchronized separately. If it changes per-connection, it's not in the consistency check.

No community discussion yet for this question.