Exam 156-215.80 topic 1 question 444 discussion

Actual exam question from Checkpoint's 156-215.80

Question #: 444
Topic #: 1

[All 156-215.80 Questions]

Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

A. On all satellite gateway to satellite gateway tunnels
B. On specific tunnels for specific gateways
C. On specific tunnels in the community
D. On specific satellite gateway to central gateway tunnels

Show Suggested Answer

Suggested Answer: C 🗳️
Each VPN tunnel in the community may be set to be a Permanent Tunnel. Since Permanent Tunnels are constantly monitored, if the VPN tunnel is down, then a log, alert, or user defined action, can be issued. A VPN tunnel is monitored by periodically sending "tunnel test" packets. As long as responses to the packets are received the VPN tunnel is considered "up." If no response is received within a given time period, the VPN tunnel is considered "down." Permanent Tunnels can only be established between Check Point Security Gateways. The configuration of Permanent Tunnels takes place on the community level and:
✑ Can be specified for an entire community. This option sets every VPN tunnel in the community as permanent.
✑ Can be specified for a specific Security Gateway. Use this option to configure specific Security Gateways to have permanent tunnels.
✑ Can be specified for a single VPN tunnel. This feature allows configuring specific tunnels between specific Security Gateways as permanent.
Reference:
https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/14018

by Tuffin at Jan. 23, 2022, 11 a.m.

Comments

Submit Cancel

Hernan_Mella

1 year ago

For R80 is B ; For R81 is C

upvoted 1 times

Hernan_Mella

1 year ago

info here: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_SitetoSiteVPN_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_SitetoSiteVPN_AdminGuide/14018 But in the window of R81 appears the text as the answer C

upvoted 1 times

...

Romex

1 year ago

Selected Answer: B

The configuration of Permanent Tunnels takes place on the community level and: Can be specified for an entire community. This option sets every VPN tunnel in the community as permanent. Can be specified for a specific Security Gateway. Use this option to configure specific Security Gateways to have permanent tunnels. Can be specified for a single VPN tunnel. This feature allows configuring specific tunnels between specific Security Gateways as permanent.

upvoted 1 times

...

CCSAChallenger

1 year, 1 month ago

Literally the third option in the answer tells "Can be specified for a single VPN tunnel. This feature allows configuring specific tunnels between specific Security Gateways as permanent." Answer is B

upvoted 2 times

...

babochnik

1 year, 1 month ago

Selected Answer: C

CCSA book - Permanent VPN tunnels on all tunnels in the community on all tunnels for specific on specific tunnels in the community

upvoted 1 times

...

Tuffin

1 year, 5 months ago

i think B is right, not C -> Can be specified for a single VPN tunnel. This feature allows configuring specific tunnels between specific Security Gateways as permanent.

upvoted 2 times

PieterDW

1 year, 5 months ago

Correct. "(Permanent Tunnels) Can be specified for a single VPN tunnel. This feature allows configuring specific tunnels between specific Security Gateways as permanent." https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/14018

upvoted 2 times

...