Check Point 156-215.81.20 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-215.81.20
- Exam Name: Check Point Certified Security Administrator R81.20
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #131
Fill in the blanks: Gaia can be configured using the ____ or ____
- A . GaiaUI; command line interface (serial console only)
- B . Gaia Interface; Gaia Ultimate Shell
- C . Command line interface; GAiA Portal
- D . Web Ultimate Interface; Gaia Interface (SSH)
Correct Answer: C
C
Explanation:
Check Point Gaia can be configured using:
The Command Line Interface (CLI) C This includes Clish and Expert mode, accessible via SSH, console access, or direct login.
The GAiA Portal (WebUI) C A browser-based graphical user interface used to manage Gaia settings.
Option A (incorrect): The CLI is not limited to serial console access. SSH is widely used.
Option B (incorrect): "Gaia Ultimate Shell" is not an official term.
Option D (incorrect): "Web Ultimate Interface" is not a valid name. Thus, the correct answer is
C. Command line interface; GAiA Portal.
Reference: Check Point official documentation states that Gaia can be managed using the CLI or WebUI (GAiA Portal).
C
Explanation:
Check Point Gaia can be configured using:
The Command Line Interface (CLI) C This includes Clish and Expert mode, accessible via SSH, console access, or direct login.
The GAiA Portal (WebUI) C A browser-based graphical user interface used to manage Gaia settings.
Option A (incorrect): The CLI is not limited to serial console access. SSH is widely used.
Option B (incorrect): "Gaia Ultimate Shell" is not an official term.
Option D (incorrect): "Web Ultimate Interface" is not a valid name. Thus, the correct answer is
C. Command line interface; GAiA Portal.
Reference: Check Point official documentation states that Gaia can be managed using the CLI or WebUI (GAiA Portal).
Question #132
Which of the following cannot be configured in an Access Role Object?
- A . Networks
- B . Users
- C . Time
- D . Machines
Correct Answer: C
C
Explanation:
The following cannot be configured in an Access Role Object: Time4. An Access Role Object is a way to define a group of users based on four criteria: Networks, Users, Machines, and Locations5. Networks are IP addresses or network objects that represent the source or destination of the traffic. Users are user accounts or user groups from an identity source such as LDAP or RADIUS. Machines are endpoints that are identified by MAC addresses or certificates. Locations are geographical regions based on IP addresses.
Reference: Check Point R81 Firewall Administration Guide, Check Point R81 Identity Awareness Administration Guide
C
Explanation:
The following cannot be configured in an Access Role Object: Time4. An Access Role Object is a way to define a group of users based on four criteria: Networks, Users, Machines, and Locations5. Networks are IP addresses or network objects that represent the source or destination of the traffic. Users are user accounts or user groups from an identity source such as LDAP or RADIUS. Machines are endpoints that are identified by MAC addresses or certificates. Locations are geographical regions based on IP addresses.
Reference: Check Point R81 Firewall Administration Guide, Check Point R81 Identity Awareness Administration Guide
Question #133
R80.10 management server can manage gateways with which versions installed?
- A . Versions R77 and higher
- B . Versions R76 and higher
- C . Versions R75.20 and higher
- D . Version R75 and higher
Correct Answer: B
B
Explanation:
The R80.10 management server can manage gateways with versions R76 and higher34. Versions lower than R76 are not supported by the R80.10 management server.
Reference: Check Point R80.10 Release Notes, Free Check Point CCSA Sample Questions and Study Guide
B
Explanation:
The R80.10 management server can manage gateways with versions R76 and higher34. Versions lower than R76 are not supported by the R80.10 management server.
Reference: Check Point R80.10 Release Notes, Free Check Point CCSA Sample Questions and Study Guide
Question #134
Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?
- A . Centos Linux
- B . Gaia embedded
- C . Gaia
- D . Red Hat Enterprise Linux version 5
Correct Answer: B
B
Explanation:
Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use Gaia embedded as the operating system. Gaia embedded is a lightweight version of Gaia that is designed for small and medium businesses1. Centos Linux, Gaia, and Red Hat Enterprise Linux version 5 are not the operating systems used by Rugged appliances.
B
Explanation:
Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use Gaia embedded as the operating system. Gaia embedded is a lightweight version of Gaia that is designed for small and medium businesses1. Centos Linux, Gaia, and Red Hat Enterprise Linux version 5 are not the operating systems used by Rugged appliances.
Question #135
Which type of Endpoint Identity Agent includes packet tagging and computer authentication?
- A . Full
- B . Custom
- C . Complete
- D . Light
Correct Answer: A
A
Explanation:
The type of Endpoint Identity Agent that includes packet tagging and computer authentication is Full. The Full Identity Agent is a client-side software that provides full identity awareness features, such as user authentication, computer authentication, packet tagging, identity caching, and identity sharing. The other types of Endpoint Identity Agents are Custom, Complete, and Light, which have different features and capabilities.
A
Explanation:
The type of Endpoint Identity Agent that includes packet tagging and computer authentication is Full. The Full Identity Agent is a client-side software that provides full identity awareness features, such as user authentication, computer authentication, packet tagging, identity caching, and identity sharing. The other types of Endpoint Identity Agents are Custom, Complete, and Light, which have different features and capabilities.
Question #136
Which Check Point software blade provides Application Security and identity control?
- A . Identity Awareness
- B . Data Loss Prevention
- C . URL Filtering
- D . Application Control
Correct Answer: D
D
Explanation:
The Check Point software blade that provides Application Security and identity control is Application Control3. Application Control enables network administrators to identify, allow, block, or limit usage of thousands of applications and millions of websites3. Therefore, the correct answer is D. Application Control
D
Explanation:
The Check Point software blade that provides Application Security and identity control is Application Control3. Application Control enables network administrators to identify, allow, block, or limit usage of thousands of applications and millions of websites3. Therefore, the correct answer is D. Application Control
Question #137
What is the default tracking option of a rule?
- A . Tracking
- B . Log
- C . None
- D . Alert
Correct Answer: B
B
Explanation:
The default tracking option of a rule is Log3. This means that the Security Gateway will generate a log entry for every connection that matches the rule. The log entry will contain information such as source, destination, service, action, and time. Other tracking options include None, Alert, Mail, SNMP Trap, User Alert, and Accounting.
Reference: Check Point R81 Firewall Administration Guide
B
Explanation:
The default tracking option of a rule is Log3. This means that the Security Gateway will generate a log entry for every connection that matches the rule. The log entry will contain information such as source, destination, service, action, and time. Other tracking options include None, Alert, Mail, SNMP Trap, User Alert, and Accounting.
Reference: Check Point R81 Firewall Administration Guide
Question #138
Which one of the following is TRUE?
- A . Ordered policy is a sub-policy within another policy
- B . One policy can be either inline or ordered, but not both
- C . Inline layer can be defined as a rule action
- D . Pre-R80 Gateways do not support ordered layers
Correct Answer: C
C
Explanation:
The answer is C because inline layer can be defined as a rule action in a policy layer. Inline layer is a sub-policy that contains additional rules that are applied only if the parent rule matches. Ordered layer is a policy layer that contains rules that are applied in order, from top to bottom. One policy can be either inline or ordered, but not both. Pre-R80 Gateways do support ordered layers, but not inline layers5
Reference: Check Point R81 Policy Layers and Sub-Policies, [Check Point R81 Security Gateway Administration Guide]
C
Explanation:
The answer is C because inline layer can be defined as a rule action in a policy layer. Inline layer is a sub-policy that contains additional rules that are applied only if the parent rule matches. Ordered layer is a policy layer that contains rules that are applied in order, from top to bottom. One policy can be either inline or ordered, but not both. Pre-R80 Gateways do support ordered layers, but not inline layers5
Reference: Check Point R81 Policy Layers and Sub-Policies, [Check Point R81 Security Gateway Administration Guide]
Question #139
When configuring LDAP with User Directory integration, changes applied to a User Directory template are:
- A . Not reflected for any users unless the local user template is changed.
- B . Not reflected for any users who are using that template.
- C . Reflected for ail users who are using that template and if the local user template is changed as well.
- D . Reflected immediately for all users who are using that template.
Correct Answer: D
D
Explanation:
LDAP (Lightweight Directory Access Protocol) is a protocol that allows accessing and maintaining distributed directory information services over a network. User Directory integration is a feature of Identity Awareness that allows Check Point products to use LDAP servers as identity sources. When configuring LDAP with User Directory integration, changes applied to a User Directory template are reflected immediately for all users who are using that template. A User Directory template defines the settings for connecting to an LDAP server and retrieving user information3.
Reference: Check Point R81 Identity Awareness Administration Guide
D
Explanation:
LDAP (Lightweight Directory Access Protocol) is a protocol that allows accessing and maintaining distributed directory information services over a network. User Directory integration is a feature of Identity Awareness that allows Check Point products to use LDAP servers as identity sources. When configuring LDAP with User Directory integration, changes applied to a User Directory template are reflected immediately for all users who are using that template. A User Directory template defines the settings for connecting to an LDAP server and retrieving user information3.
Reference: Check Point R81 Identity Awareness Administration Guide
Question #140
To view the policy installation history for each gateway, which tool would an administrator use?
- A . Revisions
- B . Gateway installations
- C . Installation history
- D . Gateway history
Correct Answer: C
C
Explanation:
To view the policy installation history for each gateway, an administrator would use the Installation history tool1, p. 22. The Installation history tool shows the date and time of each policy installation, the name of the administrator who installed it, and the status of the installation3. Revisions, Gateway installations, and Gateway history are not valid tools in SmartConsole.
Reference: Check Point CCSA –
R81: Practice Test & Explanation, Check Point SmartConsole R81 Help
C
Explanation:
To view the policy installation history for each gateway, an administrator would use the Installation history tool1, p. 22. The Installation history tool shows the date and time of each policy installation, the name of the administrator who installed it, and the status of the installation3. Revisions, Gateway installations, and Gateway history are not valid tools in SmartConsole.
Reference: Check Point CCSA –
R81: Practice Test & Explanation, Check Point SmartConsole R81 Help