Exam 156-215.81 topic 1 question 151 discussion

D is the one

D is correct

The correct answer is D, In environments that use many Security Gateways and AD Query, we recommend that you set only one Security Gateway to acquire identities from a given Active Directory domain controller for each physical site. If more than one Security Gateway gets identities from the same AD server, the AD server can become overloaded with WMI queries. Set these options on the Identity Awareness > Identity Sharing page of the Security Gateway object: One Security Gateway to share identities with other Security Gateways. This is the Security Gateway that gets identities from a given domain controller. All other Security Gateways to get identities from the Security Gateway that acquires identities from the given domain controller. Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/ html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/63005

Check Point Certified Security Administrator (CCSA) R81.10 Guide (page 515): "Multiple Security Gateways enabled with Identity Awareness can acquire and share identities with other Security Gateways."

D Identity Awareness Security Gateways can share identity information with other Identity Awareness Security Gateways. You can configure Identity Sharing across multiple Security Gateways if the Security Gateways have Identity Awareness Software BladeClosed enabled. Without Identity Sharing

D Multiple Security Gateways enabled with Identity Awareness can acquire and share identities with other Security Gateways