156-315.81.20 Gateway Deployment and Upgrades Practice Question
When upgrading a cluster, why is it recommended to upgrade the standby member first?
⚠ Common exam trap
Candidates often choose to upgrade the active member first to 'get it over with,' forgetting that this immediately disrupts traffic and eliminates the safety net of a working primary unit during potential failure.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The active unit must remain active to prevent downtime.
Upgrading the standby unit first is a core strategy for maintaining high availability during maintenance. This ensures that the active member remains in control of traffic flow, minimizing service downtime. If the upgrade on the standby fails, the primary unit is still available to maintain connectivity. This phased approach allows for a 'soft' migration, where you can verify the new software on the standby before promoting it to active status.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The active unit must remain active to prevent downtime.
Why this is correct
Upgrading the standby unit first allows the active gateway to continue processing traffic without interruption. This is the standard procedure for high-availability deployments, ensuring that the network services remain online. By keeping the active member up during the upgrade, you mitigate the impact of the maintenance on production traffic.
- ✗
The active unit is required to pull the upgrade package.
Why it's wrong here
Both members are independently capable of pulling upgrade packages from the Check Point cloud or a central management server. There is no technical limitation that forces the active member to act as a proxy or repository for the standby member's update process during an upgrade window.
- ✗
The active unit automatically pushes the upgrade to the standby.
Why it's wrong here
CPUSE upgrades are independent per gateway instance. The active unit does not automatically push upgrade packages to the standby member. Each member must be upgraded individually. Expecting an automatic push leads to a failure in the maintenance plan, as the standby would remain on the old version indefinitely.
- ✗
It clears the synchronization table on the standby.
Why it's wrong here
Clearing the synchronization table is not a desired outcome of the upgrade process; in fact, maintaining synchronization is the goal. Upgrading the standby first has no relationship to clearing the sync table, and doing so would actually be detrimental to the cluster's ability to maintain state across failover events.
About these practice questions
Courseiva writes every 156-315.81.20 question from scratch — 210 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This 156-315.81.20 practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 156-315.81.20 exam.