Check Point 156-215.81.20 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-215.81.20
- Exam Name: Check Point Certified Security Administrator R81.20
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #91
Check Point licenses come in two forms.
What are those forms?
- A . Central and Local.
- B . Access Control and Threat Prevention.
- C . On-premise and Public Cloud.
- D . Security Gateway and Security Management.
Correct Answer: A
A
Explanation:
Check Point licenses come in two forms: central and local. Central licenses are attached to the Security Management Server and are distributed to managed Security Gateways. Local licenses are attached directly to a specific Security Gateway.
A
Explanation:
Check Point licenses come in two forms: central and local. Central licenses are attached to the Security Management Server and are distributed to managed Security Gateways. Local licenses are attached directly to a specific Security Gateway.
Question #92
Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ___________.
- A . Captive Portal and Transparent Kerberos Authentication
- B . UserCheck
- C . User Directory
- D . Captive Portal
Correct Answer: A
A
Explanation:
Browser-based Authentication sends users to a web page to acquire identities using Captive Portal and Transparent Kerberos Authentication. Captive Portal is a web page that prompts users to enter their credentials. Transparent Kerberos Authentication is a method that automatically authenticates users who have a valid Kerberos ticket from the Active Directory domain controller2. UserCheck is a feature that allows users to interact with the security policy, not a method of authentication. User Directory is a component that integrates with external user databases, not a web page for authentication. Captive Portal alone is not enough to fill in the blank, as it is only one of the methods used by Browser-based Authentication.
A
Explanation:
Browser-based Authentication sends users to a web page to acquire identities using Captive Portal and Transparent Kerberos Authentication. Captive Portal is a web page that prompts users to enter their credentials. Transparent Kerberos Authentication is a method that automatically authenticates users who have a valid Kerberos ticket from the Active Directory domain controller2. UserCheck is a feature that allows users to interact with the security policy, not a method of authentication. User Directory is a component that integrates with external user databases, not a web page for authentication. Captive Portal alone is not enough to fill in the blank, as it is only one of the methods used by Browser-based Authentication.
Question #93
How Capsule Connect and Capsule Workspace differ?
- A . Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications
- B . Capsule Workspace can provide access to any application
- C . Capsule Connect provides Business data isolation
- D . Capsule Connect does not require an installed application at client
Correct Answer: A
A
Explanation:
Capsule Connect provides a Layer 3 VPN that allows users to access corporate resources securely from their mobile devices2. Capsule Workspace provides a secure container on the mobile device that isolates business data and applications from personal data and applications3. Capsule Workspace also provides a desktop with usable applications such as email, calendar, contacts, documents, and web applications3.
Reference: Check Point Capsule Connect, Check Point Capsule Workspace
A
Explanation:
Capsule Connect provides a Layer 3 VPN that allows users to access corporate resources securely from their mobile devices2. Capsule Workspace provides a secure container on the mobile device that isolates business data and applications from personal data and applications3. Capsule Workspace also provides a desktop with usable applications such as email, calendar, contacts, documents, and web applications3.
Reference: Check Point Capsule Connect, Check Point Capsule Workspace
Question #94
If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?
- A . Log Implied Rule was not set correctly on the track column on the rules base.
- B . Track log column is set to Log instead of Full Log.
- C . Track log column is set to none.
- D . Log Implied Rule was not selected on Global Properties.
Correct Answer: D
D
Explanation:
If there is an Accept Implied Policy set to “First”, Jorge cannot see any logs because Log Implied Rule was not selected on Global Properties. The Log Implied Rule option enables logging for all implied rules, such as DHCP, anti-spoofing, and cleanup rules.
Reference: Check Point R81 Security Management Administration Guide, page 103.
D
Explanation:
If there is an Accept Implied Policy set to “First”, Jorge cannot see any logs because Log Implied Rule was not selected on Global Properties. The Log Implied Rule option enables logging for all implied rules, such as DHCP, anti-spoofing, and cleanup rules.
Reference: Check Point R81 Security Management Administration Guide, page 103.
Question #95
Security Gateway software blades must be attached to what?
- A . Security Gateway
- B . Security Gateway container
- C . Management server
- D . Management container
Correct Answer: B
B
Explanation:
Security Gateway software blades must be attached to a Security Gateway container. A Security Gateway container is a logical object that represents a physical or virtual machine that runs the Security Gateway software. A software blade is a modular security feature that can be enabled or disabled eway container. A software blade can provide functions such as firewall, VPN, IPS, anti-virus, anti-bot, application control, URL filtering, etc.
Reference: [Security Gateway Containers], [Software Blades]
B
Explanation:
Security Gateway software blades must be attached to a Security Gateway container. A Security Gateway container is a logical object that represents a physical or virtual machine that runs the Security Gateway software. A software blade is a modular security feature that can be enabled or disabled eway container. A software blade can provide functions such as firewall, VPN, IPS, anti-virus, anti-bot, application control, URL filtering, etc.
Reference: [Security Gateway Containers], [Software Blades]
Question #96
After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect.
Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.
- A . set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config
- B . add interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 onsave config
- C . set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 onsave config
- D . add interface Mgmt ipv4-address 192.168.80.200 mask-length 24add static-route default nexthop
gateway address 192.168.80.1 onsave config
Correct Answer: A
A
Explanation:
The commands you could use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1 after the initial installation on Check Point appliance are:
set interface Mgmt ipv4-address 192.168.80.200 mask-length 24. This command sets the IPv4 address and subnet mask of the Management interface.
set static-route default nexthop gateway address 192.168.80.1 on. This command sets the default gateway for IPv4 routing.
save config. This command saves the configuration changes.
Reference: [Check Point R81 Gaia CLI Reference Guide], [Check Point R81 Gaia Administration Guide]
A
Explanation:
The commands you could use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1 after the initial installation on Check Point appliance are:
set interface Mgmt ipv4-address 192.168.80.200 mask-length 24. This command sets the IPv4 address and subnet mask of the Management interface.
set static-route default nexthop gateway address 192.168.80.1 on. This command sets the default gateway for IPv4 routing.
save config. This command saves the configuration changes.
Reference: [Check Point R81 Gaia CLI Reference Guide], [Check Point R81 Gaia Administration Guide]
Question #97
Customer’s R80 management server needs to be upgraded to R80.10.
What is the best upgrade method when the management server is not connected to the Internet?
- A . Export R80 configuration, clean install R80.10 and import the configuration
- B . CPUSE online upgrade
- C . CPUSE offline upgrade
- D . SmartUpdate upgrade
Correct Answer: C
C
Explanation:
The best upgrade method when the management server is not connected to the Internet is CPUSE offline upgrade. This method allows you to download the upgrade package from another source and install it manually on the management server. The other methods require Internet connection or are not supported for R80.10.
Reference: [R80.10 Upgrade Verification and FAQ], [Check Point CCSA – R81: Practice Test & Explanation]
C
Explanation:
The best upgrade method when the management server is not connected to the Internet is CPUSE offline upgrade. This method allows you to download the upgrade package from another source and install it manually on the management server. The other methods require Internet connection or are not supported for R80.10.
Reference: [R80.10 Upgrade Verification and FAQ], [Check Point CCSA – R81: Practice Test & Explanation]
Question #98
What is NOT an advantage of Stateful Inspection?
- A . High Performance
- B . Good Security
- C . No Screening above Network layer
- D . Transparency
Correct Answer: C
C
Explanation:
The option that is NOT an advantage of Stateful Inspection is No Screening above Network layer.
Stateful Inspection is a firewall technology that inspects packets at all layers of the OSI model, from layer 3 (Network) to layer 7 (Application). Stateful Inspection provides screening above Network layer, such as checking TCP flags, sequence numbers, ports, and application protocols. The other options are advantages of Stateful Inspection, as it provides high performance, good security, and transparency for legitimate traffic.
Reference: Stateful Inspection Technology, Firewall Administration Guide
C
Explanation:
The option that is NOT an advantage of Stateful Inspection is No Screening above Network layer.
Stateful Inspection is a firewall technology that inspects packets at all layers of the OSI model, from layer 3 (Network) to layer 7 (Application). Stateful Inspection provides screening above Network layer, such as checking TCP flags, sequence numbers, ports, and application protocols. The other options are advantages of Stateful Inspection, as it provides high performance, good security, and transparency for legitimate traffic.
Reference: Stateful Inspection Technology, Firewall Administration Guide
Question #99
Which of the following commands is used to verify license installation?
- A . Cplic verify license
- B . Cplic print
- C . Cplic show
- D . Cplic license
Correct Answer: B
B
Explanation:
The command cplic print is used to verify license installation. It displays the installed licenses and their expiration dates.
Reference: [Check Point R81 Command Line Interface Reference Guide], Check Point :: Pearson VUE
B
Explanation:
The command cplic print is used to verify license installation. It displays the installed licenses and their expiration dates.
Reference: [Check Point R81 Command Line Interface Reference Guide], Check Point :: Pearson VUE
Question #100
The Gateway Status view in SmartConsole shows the overall status of Security Gateways and Software Blades.
What does the Status Attention mean?
- A . Cannot reach the Security Gateway.
- B . The gateway and all its Software Blades are working properly.
- C . At least one Software Blade has a minor issue, but the gateway works.
- D . Cannot make SIC between the Security Management Server and the Security Gateway
Correct Answer: C
C
Explanation:
The Status Attention means that at least one Software Blade has a minor issue, but the gateway works1. For example, this could indicate a license expiration warning, a policy installation failure, or a blade activation problem2.
Reference: Check Point R81 SmartConsole Guide, Check Point R81 Security Management Administration Guide
C
Explanation:
The Status Attention means that at least one Software Blade has a minor issue, but the gateway works1. For example, this could indicate a license expiration warning, a policy installation failure, or a blade activation problem2.
Reference: Check Point R81 SmartConsole Guide, Check Point R81 Security Management Administration Guide