Check Point Certified Security Expert (CCSE) R80 — Question 271

VPN Link Selection will perform the following when the primary VPN link goes down?

Answer options

• A. The Firewall will drop the packets.
• B. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.
• C. The Firewall will send out the packet on all interfaces.
• D. The Firewall will inform the client that the tunnel is down.

Correct answer: B

Explanation

The correct answer is B because when the primary VPN link fails, the Firewall can automatically update its Link Selection entries to switch to a backup link, ensuring continuous connectivity. Options A, C, and D are incorrect as they describe actions that do not maintain the tunnel's functionality or fail to provide an alternative link.