156-215.80 · Question #530
Which option will match a connection regardless of its association with a VPN community?
The correct answer is B. Accept all encrypted traffic. The 'Accept all encrypted traffic' option in the VPN column matches any encrypted connection from any VPN community, making community membership irrelevant.
Question
Which option will match a connection regardless of its association with a VPN community?
Options
- AAll Site-to-Site VPN Communities
- BAccept all encrypted traffic
- CAll Connections (Clear or Encrypted)
- DSpecific VPN Communities
How the community answered
(53 responses)- A2% (1)
- B87% (46)
- C4% (2)
- D8% (4)
Why each option
The 'Accept all encrypted traffic' option in the VPN column matches any encrypted connection from any VPN community, making community membership irrelevant.
'All Site-to-Site VPN Communities' restricts matching to site-to-site community traffic only, excluding remote access VPNs and any traffic not part of a defined site-to-site community.
'Accept all encrypted traffic' is a VPN rule option that instructs the gateway to match and permit any encrypted traffic regardless of which VPN community - or no defined community - the connection is associated with. This is the broadest encrypted-traffic match and is independent of community configuration, making it the correct choice when community association should not matter.
'All Connections (Clear or Encrypted)' matches both encrypted and unencrypted traffic, but the question asks specifically about matching regardless of VPN community association for encrypted connections - 'Accept all encrypted traffic' is the targeted answer for that scenario.
'Specific VPN Communities' narrows the match to explicitly named communities, which is the opposite of matching regardless of community association.
Concept tested: Check Point VPN rule base community matching options
Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/VPN-Communities.htm
Topics
Community Discussion
No community discussion yet for this question.