Check Point Certified Security Administrator – R81.20 (CCSA) v1.0 Flashcards

1
Q

Which of the following is a valid deployment option?

A. CloudSec deployment
B. Disliked deployment
C. Router only deployment
D. Standalone deployment

A

D. Standalone deployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Using the SmartConsole, which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

A. Read Only All
B. Full Access
C. Editor
D. Super User

A

A. Read Only All

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which Check Point software blade monitors Check Point devices and provides a picture of network and security performance?

A. Logging and Status
B. Monitoring
C. Threat Emulation
D. Application Control

A

B. Monitoring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which type of Check Point license ties the package license to the IP address of the Security Management Server?

A. Formal
B. Corporate
C. Central
D. Local

A

D. Local

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers? Choose the BEST answer.

A. Anti-Malware
B. Content Awareness
C. Anti-Virus
D. IPS

A

C. Anti-Virus

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

URL Filtering cannot be used to:

A. Control Data Security
B. Decrease legal liability
C. Improve organizational security
D. Control Bandwidth issues

A

A. Control Data Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which one of the following is TRUE?

A. One policy can be either inline or ordered, but not both.
B. Inline layer can be defined as a rule action.
C. Ordered policy is a sub-policy within another policy.
D. Pre-R80 Gateways do not support ordered layers.

A

B. Inline layer can be defined as a rule action.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Fill in the blanks: A Check Point software license consists of a _____ and _____.

A. Software container; software package
B. Software package; signature
C. Signature; software blade
D. Software blade; software container

A

A. Software container; software package

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which of the following is used to initially create trust between a Gateway and Security Management Server?

A. One-time Password
B. Token
C. Certificate
D. Internal Certificate Authority

A

A. One-time Password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the two elements of address translation rules?

A. Original packet and translated packet
B. Manipulated packet and original packet
C. Untranslated packet and manipulated packet
D. Translated packet and untranslated packet

A

A. Original packet and translated packet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which of the following log queries would show only dropped packets with source address of 192.168.1.1 and destination address of 172.26.1.1?

A. 192.168.1.1 AND 172.26.1.1 AND drop
B. src:192.168.1.1 AND dst:172.26.1.1 AND action:Drop
C. 192.168.1.1 OR 172.26.1.1 AND action:Drop
D. src:192.168.1.1 OR dst:172.26.1.1 AND action:Drop

A

B. src:192.168.1.1 AND dst:172.26.1.1 AND action:Drop

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Fill in the blanks: The _____ collects logs and sends them to the _____.

A. Log server; Security Gateway
B. Security Gateways; log server
C. Log server; security management server
D. Security management server; Security Gateway

A

B. Security Gateways; log server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

A. RADIUS
B. SecurID
C. Check Point password
D. Security questions

A

D. Security questions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

A. Route-based- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTIs. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.
B. Domain-based- VPN domains are pre-defined for all VPN Gateways.
A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.
C. Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.
D. Domain-based- VPN domains are pre-defined for all VPN Gateways.
When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.

A

A. Route-based- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTIs. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the main objective when using Application Control?

A. To see what users are doing.
B. Ensure security and privacy of information.
C. To filter out specific content.
D. To assist the firewall blade with handling traffic.

A

B. Ensure security and privacy of information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which default Gaia user has full read/write access?

A. superuser
B. monitor
C. altuser
D. admin

A

D. admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which icon in the WebUI indicates that read/write access is enabled?

A. Eyeglasses
B. Pencil
C. Padlock
D. Book

A

B. Pencil

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which SmartConsole tab is used to monitor network and security performance?

A. Logs Monitor
B. Manage Settings
C. Security Policies
D. Gateway Servers

A

A. Logs Monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Check Point Update Service Engine (CPUSE), also known as Deployment Agent [DA], is an advanced and intuitive mechanism for software deployment on Gaia OS. What software packages are supported for deployment?

A. It supports deployments of single HotFixes (HF), and of Major Versions. Blink Packages and HotFix Accumulators (Jumbo) are not supported.
B. It supports deployments of single HotFixes (HF), of HotFix Accumulators (Jumbo), and of Major Versions.
C. It supports deployments of Major Versions and Blink packages only.
D. It supports deployments of single HotFixes (HF), of HotFix Accumulators (Jumbo), but not of Major Versions.

A

B. It supports deployments of single HotFixes (HF), of HotFix Accumulators (Jumbo), and of Major Versions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

In SmartConsole, on which tab are Permissions and Administrators defined?

A. MANAGE & SETTINGS
B. SECURITY POLICIES
C. GATEWAYS & SERVERS
D. LOGS & MONITOR

A

A. MANAGE & SETTINGS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which tool allows automatic update of Gaia OS and Check Point products installed on Gaia OS?

A. CPDAS - Check Point Deployment Agent Service
B. CPUSE - Check Point Upgrade Service Engine
C. CPASE - Check Point Automatic Service Engine
D. CPAUE - Check Point Automatic Update Engine

A

B. CPUSE - Check Point Upgrade Service Engine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

In the Check Point three-tiered architecture, which of the following is NOT a function of the Security Management Server?

A. Verify and compile Security Policies.
B. Display policies and logs on the administrator’s workstation.
C. Store firewall logs to hard drive storage.
D. Manage the object database.

A

B. Display policies and logs on the administrator’s workstation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

True or False: More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time.

A. True, every administrator works on a different database that is independent of the other administrators
B. False, only one administrator can login with write permission
C. True, every administrator works in a session that is independent of the other administrators
D. False, this feature has to be enabled in the Global Properties

A

C. True, every administrator works in a session that is independent of the other administrators

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What Check Point tool is used to automatically update Check Point products for the Gaia OS?

A. Check Point Update Engine
B. Check Point Upgrade Installation Service
C. Check Point Upgrade Service Engine (CPUSE)
D. Check Point INSPECT Engine

A

C. Check Point Upgrade Service Engine (CPUSE)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

A. Delete older versions of database.
B. Publish or discard the session.
C. Revert the session.
D. Save and install the Policy.

A

B. Publish or discard the session.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the two deployment options available for a security gateway?

A. Bridge and Switch
B. Local and Remote
C. Cloud and Router
D. Standalone and Distributed

A

D. Standalone and Distributed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

One of major features in SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

A. AdminB sees a pencil icon next the rule that AdminB is currently editing.
B. AdminA, AdminB and AdminC are editing three different rules at the same time.
C. AdminA and AdminB are editing the same rule at the same time.
D. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.

A

C. AdminA and AdminB are editing the same rule at the same time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Which one of the following is the preferred licensing model? Select the BEST answer.

A. Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server.
B. Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency.
C. Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency on the gateway.
D. Central licensing because it ties the package license to the MAC-address of the Security Management Server’s Mgmt-interface and has no dependency on the gateway.

A

C. Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency on the gateway.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

A Check Point Software license consists of two components, the Software Blade and the Software Container. There are _____ types of Software Containers: _____.

A. Two; Security Management and Endpoint Security
B. Three; Security Management, Security Gateway, and Endpoint Security
C. Three; Security Gateway, Endpoint Security, and Gateway Management
D. Two; Endpoint Security and Security Gateway

A

B. Three; Security Management, Security Gateway, and Endpoint Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

A. Formal
B. Central
C. Local
D. Corporate

A

C. Local

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Tom has connected to the Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made?

A. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.
B. Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.
C. Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work.
D. Tom’s changes will be lost since he lost connectivity and he will have to start again.

A

C. Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

In which deployment is the security management server and Security Gateway installed on the same appliance?

A. Switch
B. Standalone
C. Distributed
D. Remote

A

B. Standalone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

A. Data Awareness
B. Threat Emulation
C. Application Control
D. Identity Awareness

A

D. Identity Awareness

34
Q

DLP and Mobile Access Policy are examples of what type of Policy?

A. Shared Policies
B. Unified Policies
C. Inspection Policies
D. Standard Policies

A

A. Shared Policies

35
Q

What is the default shell of Gaia CLI?

A. Read-only
B. Expert
C. Clish
D. Bash

A

C. Clish

36
Q

Which of the following is NOT a valid application navigation tab in SmartConsole?

A. WEBUI & COMMAND LINE
B. SECURITY POLICIES
C. GATEWAYS & SERVERS
D. LOGS & MONITOR

A

A. WEBUI & COMMAND LINE

37
Q

What are two basic rules Check Point recommends for building an effective security policy?

A. Accept Rule and Drop Rule
B. Explicit Rule and Implied Rule
C. Cleanup Rule and Stealth Rule
D. NAT Rule and Reject Rule

A

C. Cleanup Rule and Stealth Rule

38
Q

When dealing with policy layers, what two layer types can be utilized?

A. Inbound Layers and Outbound Layers
B. Ordered Layers and Inline Layers
C. Structured Layers and Overlap Layers
D. R81.X does not support Layers

A

B. Ordered Layers and Inline Layers

39
Q

What are the three main components of Check Point security management architecture?

A. Smart Console, Standalone, Security Management Server
B. Policy-Client, Security Management Server, Security Gateway
C. SmartConsole, Security Policy Server, Logs & Monitoring
D. SmartConsole, Security Management Server, Security Gateway

A

D. SmartConsole, Security Management Server, Security Gateway

40
Q

Which Check Point software blade provides protection from zero-day and undiscovered threats?

A. Threat Extraction
B. Threat Emulation
C. Firewall
D. Application Control

A

B. Threat Emulation

41
Q

What are the three types of UserCheck messages?

A. ask, block, and notify
B. block, action, and warn
C. action, inform, and ask
D. inform, ask, and drop

A

A. ask, block, and notify

42
Q

By default, which port is used to connect to the GAiA Portal?

A. 4434
B. 80
C. 8080
D. 443

A

D. 443

43
Q

Choose what BEST describes a Session.

A. Sessions ends when policy is pushed to the Security Gateway.
B. Sessions locks the policy package for editing.
C. Starts when an Administrator logs in through SmartConsole and ends when the Administrator logs out.
D. Starts when an Administrator publishes all the changes made on SmartConsole.

A

C. Starts when an Administrator logs in through SmartConsole and ends when the Administrator logs out.

44
Q

Which command shows detailed information about VPN tunnels?

A. cat $FWDIR/conf/vpn.conf
B. vpn tu tlist
C. vpn tu
D. cpview

A

C. vpn tu

45
Q

After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?

A. Gateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.
B. Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.
C. The firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.
D. The gateways can only send logs to an SMS and cannot send logs to a Log Server. Log Servers are proprietary log archive servers.

A

B. Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.

46
Q

Fill in the blank: Backup and restores can be accomplished through _____.

A. CLI, SmartUpdate, or SmartBackup
B. SmartUpdate, SmartBackup, or SmartConsole
C. SmartConsole, WebUI, or CLI
D. WebUI, CLI, or SmartUpdate

A

C. SmartConsole, WebUI, or CLI

47
Q

What kind of NAT enables Source Port Address Translation by default?

A. Automatic Hide NAT
B. Automatic Static NAT
C. Manual Static NAT
D. Manual Hide NAT

A

A. Automatic Hide NAT

48
Q

Fill in the blanks: In _____ NAT, Only the _____ is translated.

A. Hide; source
B. Simple; source
C. Static; source
D. Hide; destination

A

A. Hide; source

49
Q

Application Control/URL filtering database library is known as:

A. AppWiki
B. Application-Forensic Database
C. Application Library
D. Application database

A

A. AppWiki

50
Q

Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

A. Security Management Server
B. Security Gateway
C. SmartConsole
D. SmartManager

A

A. Security Management Server

51
Q

Which of the following technologies extracts detailed information from packets and stores that information in different tables?

A. Application Layer Firewall
B. Packet Filtering
C. Next-Generation Firewall
D. Stateful Inspection

A

D. Stateful Inspection

52
Q

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?

A. Open SmartEvent to see why they are being blocked.
B. From SmartConsole, go to the Log & Monitor tab and filter for the IP address of the tablet.
C. Open SmartMonitor and connect remotely to the wireless controller.
D. Open SmartUpdate and review the logs tab.

A

B. From SmartConsole, go to the Log & Monitor tab and filter for the IP address of the tablet.

53
Q

Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?

A. Gaia iOS
B. Red Hat Enterprise Linux version 4
C. Centos Unix
D. Gaia embedded

A

A. Gaia iOS

54
Q

What command from the CLI would be used to view current licensing?

A. cplic print
B. show license -s
C. fw ctl tab -t license -s
D. license view

A

A. cplic print

55
Q

A security zone is a group of one or more network interfaces from different centrally managed gateways. What is considered part of the zone?

A. Security Zones are not supported by Check Point firewalls.
B. The firewall rule can be configured to include one or more subnets in a zone.
C. The zone is based on the network topology and determined according to where the interface leads to.
D. The local directly connected subnet defined by the subnet IP and subnet mask.

A

D. The local directly connected subnet defined by the subnet IP and subnet mask.

56
Q

Which of the completed statements is NOT true? The GAiA Portal (WebUI) can be used to manage Operating System user accounts and:

A. assign privileges to users.
B. assign user rights to the directory structure on the Security Management Server.
C. add more users to the Gaia operating system.
D. change the home directory of the user.

A

B. assign user rights to the directory structure on the Security Management Server.

57
Q

Which encryption algorithm is the least secured?

A. 3DES
B. AES-128
C. DES
D. AES-256

A

C. DES

58
Q

Fill in the blank: SmartConsole, SmartEvent GUI client, and _____ allow viewing of billions of consolidated logs and shows them as prioritized security events.

A. SmartMonitor
B. SmartReporter
C. SmartTracker
D. SmartView Web Application

A

D. SmartView Web Application

59
Q

What is the default tracking option of a rule?

A. None
B. Alert
C. Log
D. Tracking

A

C. Log

60
Q

Fill in the blank: Once a license is activated, a _____ should be installed.

A. License Management file
B. License Contract file
C. Security Gateway Contract file
D. Service Contract file

A

D. Service Contract file

61
Q

When should you generate new licenses?

A. Only when the license is upgraded.
B. After a device upgrade.
C. When the existing license expires, the license is upgraded, or the IP address associated with the license changes.
D. Before installing contract files.

A

C. When the existing license expires, the license is upgraded, or the IP address associated with the license changes.

62
Q

Fill in the blank: The position of an Implied rule is manipulated in the _____ window.

A. Firewall
B. Object Explorer
C. Global Properties
D. NAT

A

C. Global Properties

63
Q

Which of the following situations would not require a new license to be generated and installed?

A. The existing license expires.
B. The Security Gateway is upgraded.
C. The license is upgraded.
D. The IP address of the Security Management or Security Gateway has changed.

A

B. The Security Gateway is upgraded.

64
Q

You have enabled “Extended Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

A. Log Trimming is enabled.
B. Content Awareness is not enabled.
C. Logging has disk space issues.
D. Identity Awareness is not enabled.

A

B. Content Awareness is not enabled.

65
Q

Fill in the blank: In order to install a license, it must first be added to the _____.

A. Package repository
B. Download Center Web site
C. License and Contract repository
D. User Center

A

C. License and Contract repository

66
Q

What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

A. Shared Secret Passwords
B. Unique Passwords
C. Shared User Certificates
D. Mutually Trusted Certificate Authorities

A

D. Mutually Trusted Certificate Authorities

67
Q

Main Mode in iKEv1 uses how many packages for negotiation?

A. 3
B. depends on the make of the peer gateway
C. 6
D. 4

A

C. 6

68
Q

Which is a main component of the Check Point security management architecture?

A. Proxy Server
B. Endpoint VPN client
C. Identity Collector
D. SmartConsole

A

D. SmartConsole

69
Q

What are the two types of NAT supported by the Security Gateway?

A. Destination and Hide
B. Source and Destination
C. Static and Source
D. Hide and Static

A

D. Hide and Static

70
Q

Fill in the blank: A(n) _____ rule is created by an administrator and configured to allow or block traffic based on specified criteria.

A. Explicit
B. Implicit drop
C. Implicit accept
D. Inline

A

A. Explicit

71
Q

Where is the “Hit Count” feature enabled or disabled in SmartConsole?

A. In Global Properties.
B. On each Security Gateway.
C. On the Policy layer.
D. On the Policy Package.

A

C. On the Policy layer.

72
Q

Log query results can be exported to what file format?

A. Comma Separated Value (csv).
B. Word Document (docx).
C. Text (txt).
D. Portable Document Format (pdf).

A

A. Comma Separated Value (csv).

73
Q

In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

A. Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.
B. SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.
C. mgmt_cli (API) or WebUI on Security Gateway and SmartConsole on the Security Management Server.
D. SmartConsole and WebUI on the Security Management Server.

A

B. SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.

74
Q

Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

A. Anti-spam and Email Security
B. Anti-Virus
C. Firewall
D. Application Control

A

B. Anti-Virus

75
Q

When a Security Gateway communicates about its status to an IP address other than its own, which deployment option was chosen?

A. Targeted
B. Bridge Mode
C. Distributed
D. Standalone

A

C. Distributed

76
Q

In HTTPS Inspection policy, what actions are available in the “Actions” column of a rule?

A. “Inspect”, “Bypass”, “Block”
B. “Inspect”, “Bypass”, “Categorize”
C. “Inspect”, “Bypass”
D. “Detect”, “Bypass”

A

A. “Inspect”, “Bypass”, “Block”

77
Q

Why is a Central License the preferred and recommended method of licensing?

A. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.
B. Central Licensing actually not supported with Gaia.
C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.
D. Central Licensing is the only option when deploying Gaia.

A

A. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

78
Q

In order for changes made to policy to be enforced by a Security Gateway, what action must an administrator perform?

A. Install policy
B. Publish changes
C. Install database
D. Save changes

A

A. Install policy

79
Q

Which of the following is NOT an alert option?

A. SNMP
B. User defined alert
C. High alert
D. Mail

A

C. High alert

80
Q

The VPN Link Selection will perform the following if the primary VPN link goes down?

A. The Firewall will send out the packet on all interfaces
B. The Firewall will inform the client that the tunnel is down
C. The Firewall can update the Link Selection entries to start using a different link for the same tunnel
D. The Firewall will drop the packets

A

C. The Firewall can update the Link Selection entries to start using a different link for the same tunnel

81
Q
A