CheckPoint Exam Questions

Which form of overlapping encryption domain is NOT supported by VPN-1/FW-?

Which form of overlapping encryption domain is NOT supported by VPN-1/FW-?

A.
Full overlap

B.
Partial overlap

C.
Proper subset

Explanation:

: A VPN encryption domain is a group of networks or hosts behind a firewalled gateway that
participate in a VPN. Any traffic coming from one VPN domain and going to another will be
encrypting outbound, and then decrypted inbound at the other end. We can have “Full overlap”
and “Proper Subset” of overlapping in the VPN encryption domains supported by the NG suite.
Partial overlap is not supported by VPN1/FW1.