The correct answer is C. clusterXL_admin down. Explanation: > Graceful Failover: Unlike other options that forcefully stop processes or services, clusterXL_admin down triggers a controlled failover, allowing for a smooth transition of traffic and services to the remaining cluster member. This is crucial for maintaining network uptime during upgrades. > Zero Downtime Goal: The goal of a zero downtime upgrade is to minimize service interruptions. clusterXL_admin down aligns with this goal by orchestrating a seamless failover, ensuring traffic continues to flow uninterrupted. cpstop: This command entirely stops Check Point services, which is not appropriate for a zero downtime upgrade as it would lead to service interruptions.

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Topics-IUG/Minimum-Downtime-Upgrade-of-Security-Gateway-Cluster.htm?Highlight=cpstop

Correct Answer is B On the old Cluster Member M1, stop all Check Point services Instructions 1 Connect to the command line on the Cluster Member M1. 2 Stop all Check Point services: cpstop Notes: This forces a controlled cluster failover from the old Cluster Member M1 to one of the upgraded Cluster Members. At this moment, all connections that were initiated through the old Cluster Member M1 are dropped (because Cluster Members with different software versions cannot synchronize). https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Installation_and_Upgrade_Guide/Content/Topics-IUG/Minimum-Downtime-Upgrade-of-Security-Gateway-Cluster.htm?tocpath=Upgrade%20of%20Security%20Gateways%20and%20Clusters%7CUpgrading%20ClusterXL%252C%20VSX%20Cluster%252C%20or%20VRRP%20Cluster%7CMinimum%20Downtime%20Upgrade%7C_____1

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Topics-IUG/Minimum-Downtime-Upgrade-of-Security-Gateway-Cluster.htm Step 9.

C is correct Command in Gaia Clish – set cluster member admin dow (A is wrong) Command in Expert Mode – clusterXL_admin down (C is correct) https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/202037

C is correct

Answer is C, About "B": if you run the command cpstop literally stops ALL the processes so it's no sense if you acheived a "zero downtime "upgrade. About A and D: wrong commands, would it be; set cluster member "admin" down in both cases. Reference: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/202037

Based on R81.20 secure gateway lab

C is correct

B is the correct answer: Stop all Check Point services: cpstop Notes: This forces a controlled cluster failover from the old Cluster Member M1 to one of the upgraded Cluster Members. At this moment, all connections that were initiated through the old Cluster Member M1 are dropped (because Cluster Members with different software versions cannot synchronize). https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Topics-IUG/Zero-Downtime-Upgrade-of-Security-Gateway-Cluster.htm

I think definitely B is correct. because question say during zero down time upgrade https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Topics-IUG/Zero-Downtime-Upgrade-of-Security-Gateway-Cluster.htm

Run the following command to change the cluster state: set cluster member admin down Seems "A" is correct