156-215.81.20 VPN Basics Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Site-to-Site uses SSL, while Remote Access uses IPsec.

  Why it's wrong here

  Both Site-to-Site and Remote Access can support IPsec and SSL. Check Point gateways support IPsec for both types of tunnels, and SSL is commonly used for portal-based access, but the defining difference is the nature of the endpoints, not the specific encryption protocol used for the tunnel.

• ✓

  Site-to-Site connects gateways; Remote Access connects users.

  Why this is correct

  Site-to-Site VPNs establish tunnels between two security gateways to link entire network segments. Remote Access VPNs are designed for individual users to connect their devices to the corporate network, usually involving a client application or web-based portal to establish a secure tunnel to a single gateway.

• ✗

  Remote Access is always more secure than Site-to-Site.

  Why it's wrong here

  Security is not determined by the tunnel type but by the configuration, authentication methods, and encryption strength. A Site-to-Site tunnel can be just as secure—or more so—than a Remote Access connection, depending on the protocols and security policies applied by the administrator.

• ✗

  Site-to-Site does not support encryption.

  Why it's wrong here

  Encryption is a fundamental requirement of all VPN tunnels, whether Site-to-Site or Remote Access. Without encryption, the tunnel would simply be a plain-text routing path, which defeats the entire purpose of a Virtual Private Network, which is to ensure confidentiality, integrity, and authenticity of the data transmitted.