When using a proper subset encryption domain, which gateway is used for the Secure Client
connection?

A.
The nearest gateway to the destination host.

B.
The first gateway in the path.

C.
All the gateways in the path.

D.
A gateway specified by the administrator.

Explanation:

: This is true, the client always connect to the nearest server based in the DNS domain
information. This works like the “domain” load balancing fashion, the client creates connections
based on the Domain info. You can check this at the Checkpoint NG online documentation, see
“Proper Subset encryption”.