Check Point 156-215.81.20 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-215.81.20
- Exam Name: Check Point Certified Security Administrator R81.20
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #231
What technologies are used to deny or permit network traffic?
- A . Stateful Inspection. Firewall Blade, and URL’Application Blade
- B . Packet Filtenng. Stateful Inspection, and Application Layer Firewall
- C . Firewall Blade. URL/Application Blade and IPS
- D . Stateful Inspection. URL/Application Blade, and Threat Prevention
Correct Answer: A
A
Explanation:
The technologies that are used to deny or permit network traffic are Stateful Inspection, Firewall Blade, and URL/Application Blade. Stateful Inspection is a technology that inspects network traffic at the packet level and maintains the state and context of each connection. Firewall Blade is a software blade that enforces security policy and prevents unauthorized access to protected resources.
URL/Application Blade is a software blade that enables administrators to control access to millions of websites and applications based on users, groups, and machines.
Reference: Check Point R81 Security Gateway Administration Guide, page 9.: Check Point R81 Security Gateway Administration Guide, page 10.: Check Point R81 Security Gateway Administration Guide, page 12.
A
Explanation:
The technologies that are used to deny or permit network traffic are Stateful Inspection, Firewall Blade, and URL/Application Blade. Stateful Inspection is a technology that inspects network traffic at the packet level and maintains the state and context of each connection. Firewall Blade is a software blade that enforces security policy and prevents unauthorized access to protected resources.
URL/Application Blade is a software blade that enables administrators to control access to millions of websites and applications based on users, groups, and machines.
Reference: Check Point R81 Security Gateway Administration Guide, page 9.: Check Point R81 Security Gateway Administration Guide, page 10.: Check Point R81 Security Gateway Administration Guide, page 12.
Question #232
In order for changes made to policy to be enforced by a Security Gateway, what action must an administrator perform?
- A . Publish changes
- B . Save changes
- C . Install policy
- D . Install database
Correct Answer: C
C
Explanation:
In order for changes made to policy to be enforced by a Security Gateway, an administrator must perform Install Policy3. This action transfers the policy package from the Security Management Server to the Security Gateway and activates it.
Reference: Check Point R81 Security Management Administration Guide
C
Explanation:
In order for changes made to policy to be enforced by a Security Gateway, an administrator must perform Install Policy3. This action transfers the policy package from the Security Management Server to the Security Gateway and activates it.
Reference: Check Point R81 Security Management Administration Guide
Question #233
What is the main objective when using Application Control?
- A . To filter out specific content.
- B . To assist the firewall blade with handling traffic.
- C . To see what users are doing.
- D . Ensure security and privacy of information.
Correct Answer: D
D
Explanation:
The main objective when using Application Control is to ensure security and privacy of information4. Application Control enables administrators to control access to web applications and web sites based on risk level, user identity, and other criteria. It also provides visibility into web usage and application activity.
Reference: Check Point R81 Application Control Administration Guide
D
Explanation:
The main objective when using Application Control is to ensure security and privacy of information4. Application Control enables administrators to control access to web applications and web sites based on risk level, user identity, and other criteria. It also provides visibility into web usage and application activity.
Reference: Check Point R81 Application Control Administration Guide
Question #234
Which of the following licenses are considered temporary?
- A . Plug-and-play (Trial) and Evaluation
- B . Perpetual and Trial
- C . Evaluation and Subscription
- D . Subscription and Perpetual
Correct Answer: A
A
Explanation:
Plug-and-play (Trial) and Evaluation licenses are considered temporary because they expire after a certain period of time3. Plug-and-play licenses are valid for 15 days, while Evaluation licenses are valid for 30 days.
Reference: Check Point Licensing and Contract Operations User Guide
A
Explanation:
Plug-and-play (Trial) and Evaluation licenses are considered temporary because they expire after a certain period of time3. Plug-and-play licenses are valid for 15 days, while Evaluation licenses are valid for 30 days.
Reference: Check Point Licensing and Contract Operations User Guide
Question #235
Which of the following is NOT an advantage to using multiple LDAP servers?
- A . You achieve a faster access time by placing LDAP servers containing the database at remote sites
- B . You achieve compartmentalization by allowing a large number of users to be distributed across several servers
- C . Information on a user is hidden, yet distributed across several servers.
- D . You gain High Availability by replicating the same information on several servers
Correct Answer: C
C
Explanation:
The statement that information on a user is hidden, yet distributed across several servers is not an advantage to using multiple LDAP servers. LDAP (Lightweight Directory Access Protocol) is a protocol that allows access to a centralized directory service that stores information about users, groups, devices, etc. Using multiple LDAP servers can provide advantages such as faster access time, compartmentalization, and high availability, but not hiding information. Information on a user is not hidden by using multiple LDAP servers, but rather replicated or partitioned across them. Replication means that the same information is copied to all LDAP servers, while partitioning means that different information is stored on different LDAP servers. Both methods aim to improve performance and reliability, not security or privacy.
Reference: [LDAP Integration], [LDAP]
C
Explanation:
The statement that information on a user is hidden, yet distributed across several servers is not an advantage to using multiple LDAP servers. LDAP (Lightweight Directory Access Protocol) is a protocol that allows access to a centralized directory service that stores information about users, groups, devices, etc. Using multiple LDAP servers can provide advantages such as faster access time, compartmentalization, and high availability, but not hiding information. Information on a user is not hidden by using multiple LDAP servers, but rather replicated or partitioned across them. Replication means that the same information is copied to all LDAP servers, while partitioning means that different information is stored on different LDAP servers. Both methods aim to improve performance and reliability, not security or privacy.
Reference: [LDAP Integration], [LDAP]
Question #236
What is the default shell for the command line interface?
- A . Clish
- B . Admin
- C . Normal
- D . Expert
Correct Answer: A
A
Explanation:
Clish is the default shell for the command line interface. It is a user-friendly shell that provides a menu-based and a command-line mode. Admin, Normal, and Expert are not valid shell names1.
A
Explanation:
Clish is the default shell for the command line interface. It is a user-friendly shell that provides a menu-based and a command-line mode. Admin, Normal, and Expert are not valid shell names1.
Question #237
Choose what BEST describes a Session
- A . Sessions ends when policy is pushed to the Security Gateway.
- B . Starts when an Administrator logs in through SmartConsole and ends when the Administrator logs out.
- C . Sessions locks the policy package for editing.
- D . Starts when an Administrator publishes all the changes made on SmartConsole
Correct Answer: B
B
Explanation:
A session starts when an Administrator logs in through SmartConsole and ends when the Administrator logs out. A session allows multiple administrators to work on the same policy simultaneously, without overwriting each other’s changes3.
Reference: 3: Check Point R81 Security Management Administration Guide, page 17.
B
Explanation:
A session starts when an Administrator logs in through SmartConsole and ends when the Administrator logs out. A session allows multiple administrators to work on the same policy simultaneously, without overwriting each other’s changes3.
Reference: 3: Check Point R81 Security Management Administration Guide, page 17.
Question #238
Under which file is the proxy arp configuration stored?
- A . $FWDIR/state/proxy_arp.conf on the management server
- B . $FWDIR/conf/local.arp on the management server
- C . $FWDIR/state/_tmp/proxy.arp on the security gateway
- D . $FWDIR/conf/local.arp on the gateway
Correct Answer: D
D
Explanation:
The file that stores the proxy arp configuration is $FWDIR/conf/local.arp on the gateway3. The other files are not related to proxy arp configuration.
Reference: How to configure Proxy ARP for Manual NAT on Security Gateway, [Check Point CCSA – R81: Practice Test & Explanation]
D
Explanation:
The file that stores the proxy arp configuration is $FWDIR/conf/local.arp on the gateway3. The other files are not related to proxy arp configuration.
Reference: How to configure Proxy ARP for Manual NAT on Security Gateway, [Check Point CCSA – R81: Practice Test & Explanation]
Question #239
Which Threat Prevention Software Blade provides comprehensive protection against malicious and unwanted network traffic, focusing on application and server vulnerabilities?
- A . IPS
- B . Anti-Virus
- C . Anti-Spam
- D . Anti-bot
Correct Answer: A
A
Explanation:
The IPS (Intrusion Prevention System) Software Blade provides comprehensive protection against malicious and unwanted network traffic, focusing on application and server vulnerabilities. The other options are not related to this function.
Reference: [Check Point R81 Threat Prevention Administration Guide], page 9.
A
Explanation:
The IPS (Intrusion Prevention System) Software Blade provides comprehensive protection against malicious and unwanted network traffic, focusing on application and server vulnerabilities. The other options are not related to this function.
Reference: [Check Point R81 Threat Prevention Administration Guide], page 9.
Question #240
Which two Identity Awareness daemons are used to support identity sharing?
- A . Policy Activation Point (PAP) and Policy Decision Point (PDP)
- B . Policy Manipulation Point (PMP) and Policy Activation Point (PAP)
- C . Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
- D . Policy Decision Point (PDP) and Policy Enforcement Point (PEP)
Correct Answer: D
D
Explanation:
The two Identity Awareness daemons that are used to support identity sharing are Policy Decision Point (PDP) and Policy Enforcement Point (PEP). PDP is a daemon that runs on the Security Management Server or a dedicated Identity Awareness Server and provides identity information to other components. PEP is a daemon that runs on the Security Gateway and enforces identity-based rules based on the information received from the PDP. Identity sharing is a feature that allows PDPs and PEPs to exchange identity information across different domains or networks.
Reference: [Check Point R81 Identity Awareness Administration Guide]
D
Explanation:
The two Identity Awareness daemons that are used to support identity sharing are Policy Decision Point (PDP) and Policy Enforcement Point (PEP). PDP is a daemon that runs on the Security Management Server or a dedicated Identity Awareness Server and provides identity information to other components. PEP is a daemon that runs on the Security Gateway and enforces identity-based rules based on the information received from the PDP. Identity sharing is a feature that allows PDPs and PEPs to exchange identity information across different domains or networks.
Reference: [Check Point R81 Identity Awareness Administration Guide]