Check Point Security Gateways support two methods of identifying traffic to include in the VPN.

The correct answer isB. Check Point Site-to-Site VPN supports two principal methods for identifying and routing VPN traffic:Domain-Based VPNandRoute-Based VPN. In Domain-Based VPN, traffic is selected according to VPN Domains defined in SmartConsole. A VPN Domain is the set of internal networks or hosts protected by a VPN Security Gateway. In Route-Based VPN, traffic is routed according to the Security Gateway operating system’s routing table and sent through a VTI, or Virtual Tunnel Interface, as if the VPN tunnel were a routable interface. Option A is wrong because a VPN Community defines a collection of gateways and VPN settings, not a traffic-identification method by itself. Option C is completely unrelated to the design methods used to select VPN traffic. Option D is close-sounding but still wrong because “Community-based” is not paired with Route-Based as a traffic-selection model. The CCSE distinction is direct:Domain-Based VPN uses VPN Domains; Route-Based VPN uses routing and VTIs.

========