Check Point Certified Security Administrator (CCSA) R80 — Question 170

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

Answer options

• A. Create a new logical-server object to represent your partner's CA
• B. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)
• C. Manually import your partner's Certificate Revocation List.
• D. Manually import your partner's Access Control List.

Correct answer: B

Explanation

The correct answer is B, as exchanging exported CA keys is a necessary step in establishing trust between the two parties' Certificate Authorities. Options A, C, and D do not address the crucial first step of creating a server object based on the exchanged CA keys, which is essential for the VPN setup.