When installing the Security Policy of a Management Virtual System (MVS), what objects are available for Policy installation, other than the MVS?

Question

Options

• AAll configured Virtual Routers
• BNo other object is available for Policy installation
• CAll configured Virtual Systems and the External Virtual Router
• DAll configured Virtual Systems
• EAll configured Virtual Switches

• A
  91% (30)
• B
  3% (1)
• E
  6% (2)

Explanation

In Check Point VSX architecture, Virtual Routers (VRs) do not have independent security policies - they operate under the Management Virtual System umbrella. When you install the MVS Security Policy, it targets the MVS itself plus all configured Virtual Routers, because VRs rely on the MVS for their routing policy enforcement.

Why the distractors are wrong:

• B is wrong because VRs are additional valid targets, so "no other object" is factually incorrect.
• C and D are wrong because Virtual Systems each have their own independent Security Policy, installed separately - they are not targets of an MVS policy push.
• E is wrong because Virtual Switches are Layer 2 devices and do not support Security Policy installation at all.

Memory tip: Think of it this way - MVS manages Routers, not Systems. Virtual Systems are autonomous (own policy), but Virtual Routers are routing-layer constructs that piggyback on the MVS policy. If you remember "MVS + VRs are a bundle," you'll avoid the trap of choosing Virtual Systems.

No community discussion yet for this question.