nerdexam
Check_Point

156-561 · Question #114

What is required to route transit traffic in the Southbound hub?

The correct answer is C. VTI (VPN Tunnel Interface). VTI (VPN Tunnel Interface) is required because it enables the hub to act as a transit point by creating a routable logical interface over the VPN tunnel - without it, the hub cannot forward traffic between connected spokes or branches. Option A is wrong because transit routing…

Introduction to Check Point Cloud Security

Question

What is required to route transit traffic in the Southbound hub?

Options

  • ANothing
  • BPeering
  • CVTI (VPN Tunnel Interface)
  • DUser Defined Routes

How the community answered

(28 responses)
  • B
    4% (1)
  • C
    93% (26)
  • D
    4% (1)

Explanation

VTI (VPN Tunnel Interface) is required because it enables the hub to act as a transit point by creating a routable logical interface over the VPN tunnel - without it, the hub cannot forward traffic between connected spokes or branches. Option A is wrong because transit routing does not happen automatically; explicit configuration is needed for the hub to pass traffic it did not originate. Option B (Peering) is incorrect because peering connects networks at the same level and does not enable transit forwarding through a hub. Option D (UDRs) can influence where traffic goes after routing decisions are made, but they cannot substitute for the VTI that makes the tunnel interface routable in the first place.

Memory tip: Think "VTI = Virtual Transit Interface" - the word transit is literally baked into the name, reminding you it's the mechanism that lets traffic pass through the hub.

Topics

#VPN Tunnel Interface#Transit Traffic Routing#Southbound Hub#CloudGuard Network

Community Discussion

No community discussion yet for this question.

Full 156-561 Practice