156-215.80 · Question #173
Which of the following statements about Bridge mode is TRUE?
The correct answer is D. A bridge must be configured with a pair of interfaces. In Check Point Bridge mode, a bridge interface requires a pair of physical interfaces to transparently forward traffic between network segments without altering IP routing.
Question
Which of the following statements about Bridge mode is TRUE?
Options
- AWhen managing a Security Gateway in Bridge mode, it is possible to use a bridge interface for
- BAssuming a new installation, bridge mode requires changing the existing IP routing of the network.
- CAll ClusterXL modes are supported.
- DA bridge must be configured with a pair of interfaces.
How the community answered
(23 responses)- A4% (1)
- B9% (2)
- D87% (20)
Why each option
In Check Point Bridge mode, a bridge interface requires a pair of physical interfaces to transparently forward traffic between network segments without altering IP routing.
The bridge interface itself cannot be used for management traffic in Bridge mode; a separate, dedicated management interface is required for gateway administration.
Bridge mode is specifically designed to avoid changes to existing IP routing - the gateway operates transparently at Layer 2, which is its primary deployment advantage.
Not all ClusterXL modes are supported in Bridge mode; only High Availability mode is supported, while Load Sharing modes are not compatible with bridge deployments.
A Check Point bridge must be built from exactly two physical interfaces, one facing each network segment being bridged. This paired configuration is what allows the Security Gateway to inspect traffic transparently at Layer 2 while appearing invisible to the routed network topology.
Concept tested: Check Point Bridge mode interface pair requirement
Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/Bridge-Interfaces.htm
Topics
Community Discussion
No community discussion yet for this question.