Check Point Certified Security Administrator (CCSA) R81.20 — Question 100

The VPN Link Selection will perform the following if the primary VPN link goes down?

Answer options

• A. The Firewall will send out the packet on all interfaces
• B. The Firewall will inform the client that the tunnel is down
• C. The Firewall can update the Link Selection entries to start using a different link for the same tunnel
• D. The Firewall will drop the packets

Correct answer: C

Explanation

The correct answer is C because the Firewall is designed to adapt by updating the Link Selection entries to use an alternate link whenever the primary VPN link is unavailable. Options A and D describe actions that do not facilitate continuous connectivity, while option B does not address the capability of the Firewall to switch links.