Exam 156-215.80 topic 1 question 3 discussion

A is correct. https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/125443

None valid ... Security Gateways R71 and higher use AES128 for SIC. If one of the Security Gateways is below R71, the Security Gateways use 3DES. So there is R71 and R77.30Gws, they must use 128 Both

Check Point platforms and products authenticate each other through one of these Secure Internal Communication (SIC) methods: Certificates. Standards-based TLS for the creation of secure channels. 3DES or AES128 for encryption. Security Gateways R71 and higher use AES128 for SIC. If one of the Security Gateways is below R71, the Security Gateways use 3DES. SIC creates trusted connections between Security Gateways, management servers and other Check Point components. Trust is required to install polices on Security Gateways and to send logs between Security Gateways and management servers.

A for sure https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_SecurityManagement_AdminGuide/Content/Topics-SECMG/Secure-Internal-Communication.htm?TocPath=Managing%20Gateways%7CSecure%20Internal%20Communication%20(SIC)%7C_____5

Testing in an environment as described (which I don't have access to) needs to be done to validate the answer being A, please see below; "Gateways above R71 use AES128 for SIC. If one of the gateways is below R71, the gateways use 3DES." The important note here is "if one of the gateways is below R71, the gateways use 3DES" this indicates that the lowest version dictates the encryption. If this is not the case the documentation should read "If one of the gateways is below R71, that gateway uses 3DES" Sadly this is indicative of Check Point documentation Source; https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/125443

it should be D