Can Check Point and Third-Party Gateways Establish a Certificate-Based Site-To-Site

Multiple Choice

Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

A) Yes, but they need to have a mutually trusted certificate authority
B) Yes, but they have to have a pre-shared secret key
C) No, they cannot share certificate authorities
D) No, Certificate based VPNs are only possible between Check Point devices