156-315.81.20 Advanced VPN Design Practice Question
When configuring a VPN Star Community, what is the primary role of the Center Gateway?
⚠ Common exam trap
Candidates often confuse the role of the Center Gateway in a Star Community, incorrectly assuming it only forwards traffic to the management server instead of functioning as the active traffic hub for all spoke-to-spoke communication flows.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To serve as the traffic hub for all spoke-to-spoke communication.
In a Star Community, the Center Gateway acts as the hub that manages all encrypted traffic flows for the spokes. It is responsible for routing traffic between spokes (if configured) and inspecting all incoming traffic from them. This centralized architecture simplifies policy management by allowing the administrator to define rules on the hub, which then governs the entire communication flow within the VPN network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To act as a certificate authority for all spoke gateways.
Why it's wrong here
While the Security Management Server (SMS) can act as an ICA, the Center Gateway itself does not necessarily serve as the CA for the spokes. Spokes can use different certificate sources, and the Center Gateway's primary role remains the hub for traffic routing and centralized policy enforcement.
- ✓
To serve as the traffic hub for all spoke-to-spoke communication.
Why this is correct
In a Star Community, all encrypted traffic from the spokes is routed through the Center Gateway. If spoke-to-spoke communication is permitted, the Center Gateway acts as the central relay, inspecting the packets before forwarding them to the destination spoke, ensuring all traffic complies with the corporate policy.
- ✗
To perform local traffic inspection for spokes only.
Why it's wrong here
The Center Gateway inspects traffic between the spokes and itself, as well as traffic between spokes if enabled. It is not limited to inspecting traffic for the spokes only; it handles its own internal traffic and acts as the central security enforcement point for the whole community.
- ✗
To disable encryption for faster communication between spokes.
Why it's wrong here
VPN Communities are designed to ensure all traffic is encrypted. Disabling encryption would defeat the purpose of using a VPN. The Center Gateway enforces the encryption policy defined in the community, and traffic between spokes must remain encrypted for the entire duration of the transit.
About these practice questions
Courseiva writes every 156-315.81.20 question from scratch — 210 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This 156-315.81.20 practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 156-315.81.20 exam.