Check Point 156-215.81.20 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-215.81.20
- Exam Name: Check Point Certified Security Administrator R81.20
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #241
True or False: More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time.
- A . True, every administrator works on a different database that Is independent of the other administrators
- B . False, this feature has to be enabled in the Global Properties.
- C . True, every administrator works in a session that is independent of the other administrators
- D . False, only one administrator can login with write permission
Correct Answer: C
C
Explanation:
SmartConsole is a unified graphical user interface that allows administrators to manage multiple Check Point security products from a single console. More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time. Every administrator works in a session that is independent of the other administrators. The changes made by one administrator are not visible to others until they are published2.
Reference: Check Point R81 SmartConsole R81 User Guide
C
Explanation:
SmartConsole is a unified graphical user interface that allows administrators to manage multiple Check Point security products from a single console. More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time. Every administrator works in a session that is independent of the other administrators. The changes made by one administrator are not visible to others until they are published2.
Reference: Check Point R81 SmartConsole R81 User Guide
Question #242
Fill in the blank: Each cluster, at a minimum, should have at least ___________ interfaces.
- A . Five
- B . Two
- C . Three
- D . Four
Correct Answer: C
C
Explanation:
Each cluster, at a minimum, should have at least three interfaces4. These are:
A sync interface for synchronizing state information between cluster members.
A cluster interface for sending and receiving cluster control packets.
A production interface for handling regular traffic that passes through the cluster4.
Reference: Check Point R80.20 C How to configure Cluster firewalls C First Time Setup
C
Explanation:
Each cluster, at a minimum, should have at least three interfaces4. These are:
A sync interface for synchronizing state information between cluster members.
A cluster interface for sending and receiving cluster control packets.
A production interface for handling regular traffic that passes through the cluster4.
Reference: Check Point R80.20 C How to configure Cluster firewalls C First Time Setup
Question #243
In a Distributed deployment, the Security Gateway and the Security Management software are installed on what platforms?
- A . Different computers or appliances.
- B . The same computer or appliance.
- C . Both on virtual machines or both on appliances but not mixed.
- D . In Azure and AWS cloud environments.
Correct Answer: A
A
Explanation:
In a Distributed deployment, the Security Gateway and the Security Management software are installed on different computers or appliances2. This allows for better scalability and performance.
Reference: Check Point Security Management Administration Guide R81
A
Explanation:
In a Distributed deployment, the Security Gateway and the Security Management software are installed on different computers or appliances2. This allows for better scalability and performance.
Reference: Check Point Security Management Administration Guide R81
Question #244
Tom has connected to the Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.
What will happen to the changes already made?
- A . Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.
- B . Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.
- C . Tom’s changes will be lost since he lost connectivity and he will have to start again.
- D . Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work.
Correct Answer: D
D
Explanation:
Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work. This is because SmartConsole uses a session mechanism that allows users to work offline and save their changes locally until they are ready to publish them to the Management13. If Tom loses connectivity, he can resume his session when he reconnects and continue working on his Rule Base changes. He does not need to reboot his SmartConsole computer, clear the cache, or restore changes. His changes will not be lost since he lost connectivity.
Reference: Check Point R81 Security Management Administration Guide, Check Point CCSA – R81: Practice Test & Explanation | Udemy
D
Explanation:
Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work. This is because SmartConsole uses a session mechanism that allows users to work offline and save their changes locally until they are ready to publish them to the Management13. If Tom loses connectivity, he can resume his session when he reconnects and continue working on his Rule Base changes. He does not need to reboot his SmartConsole computer, clear the cache, or restore changes. His changes will not be lost since he lost connectivity.
Reference: Check Point R81 Security Management Administration Guide, Check Point CCSA – R81: Practice Test & Explanation | Udemy
Question #245
Which default Gaia user has full read/write access?
- A . admin
- B . superuser
- C . monitor
- D . altuser
Correct Answer: A
A
Explanation:
The default Gaia user that has full read/write access is admin3. The admin user is the superuser that can perform any administrative task on the Gaia system, such as configuring network settings, installing software updates, managing licenses, creating snapshots, and more. The admin user can also access the Gaia Portal, which is a web-based interface for managing Gaia settings and features.
Reference: Check Point R81 Gaia Administration Guide
A
Explanation:
The default Gaia user that has full read/write access is admin3. The admin user is the superuser that can perform any administrative task on the Gaia system, such as configuring network settings, installing software updates, managing licenses, creating snapshots, and more. The admin user can also access the Gaia Portal, which is a web-based interface for managing Gaia settings and features.
Reference: Check Point R81 Gaia Administration Guide
Question #246
R80 is supported by which of the following operating systems:
- A . Windows only
- B . Gaia only
- C . Gaia, SecurePlatform, and Windows
- D . SecurePlatform only
Correct Answer: B
B
Explanation:
R80 is supported by Gaia only, which is Check Point’s unified security operating system for all Check Point appliances, open servers, and virtualized gateways1, p. 14. Windows and SecurePlatform are not supported by R80.
Reference: Check Point CCSA – R81: Practice Test & Explanation, [Check Point Learning and Training Frequently Asked Questions (FAQs)]
B
Explanation:
R80 is supported by Gaia only, which is Check Point’s unified security operating system for all Check Point appliances, open servers, and virtualized gateways1, p. 14. Windows and SecurePlatform are not supported by R80.
Reference: Check Point CCSA – R81: Practice Test & Explanation, [Check Point Learning and Training Frequently Asked Questions (FAQs)]
Question #247
The CDT utility supports which of the following?
- A . Major version upgrades to R77.30
- B . Only Jumbo HFA’s and hotfixes
- C . Only major version upgrades to R80.10
- D . All upgrades
Correct Answer: D
D
Explanation:
The CDT utility supports all upgrades, including major version upgrades, Jumbo HFA’s, and hotfixes3.
Reference: Check Point Upgrade Service Engine (CPUSE) – Gaia Deployment Agent
D
Explanation:
The CDT utility supports all upgrades, including major version upgrades, Jumbo HFA’s, and hotfixes3.
Reference: Check Point Upgrade Service Engine (CPUSE) – Gaia Deployment Agent
Question #248
What are the two elements of address translation rules?
- A . Original packet and translated packet
- B . Manipulated packet and original packet
- C . Translated packet and untranslated packet
- D . Untranslated packet and manipulated packet
Correct Answer: A
A
Explanation:
Address translation rules are used to map an IP address space into another by modifying network address information in the IP header of packets.
Address translation rules have two elements:
original packet and translated packet6. The original packet is the packet before it undergoes address translation, and the translated packet is the packet after it undergoes address translation. The original packet and the translated packet may have different source and destination IP addresses, depending on the type and direction of address translation.
A
Explanation:
Address translation rules are used to map an IP address space into another by modifying network address information in the IP header of packets.
Address translation rules have two elements:
original packet and translated packet6. The original packet is the packet before it undergoes address translation, and the translated packet is the packet after it undergoes address translation. The original packet and the translated packet may have different source and destination IP addresses, depending on the type and direction of address translation.
Question #249
How do you manage Gaia?
- A . Through CLI and WebUI
- B . Through CLI only
- C . Through SmartDashboard only
- D . Through CLI, WebUI, and SmartDashboard
Correct Answer: D
D
Explanation:
Gaia can be managed through CLI, WebUI, and SmartDashboard1, p. 17-18. CLI is a command-line interface that allows administrators to configure and monitor Gaia using commands and scripts. WebUI is a web-based interface that allows administrators to configure and monitor Gaia using a browser. SmartDashboard is a graphical user interface that allows administrators to manage security policies and objects for Gaia devices.
Reference: Check Point CCSA – R81: Practice Test & Explanation, [Check Point Gaia Administration Guide R81], [Check Point Security Management Administration Guide R81]
D
Explanation:
Gaia can be managed through CLI, WebUI, and SmartDashboard1, p. 17-18. CLI is a command-line interface that allows administrators to configure and monitor Gaia using commands and scripts. WebUI is a web-based interface that allows administrators to configure and monitor Gaia using a browser. SmartDashboard is a graphical user interface that allows administrators to manage security policies and objects for Gaia devices.
Reference: Check Point CCSA – R81: Practice Test & Explanation, [Check Point Gaia Administration Guide R81], [Check Point Security Management Administration Guide R81]
Question #250
When configuring Spoof Tracking, which tracking actions can an administrator select to be done when spoofed packets are detected?
- A . Log, send snmp trap, email
- B . Drop packet, alert, none
- C . Log, alert, none
- D . Log, allow packets, email
Correct Answer: C
C
Explanation:
The tracking actions that can be selected when configuring Spoof Tracking are Log, alert, none. Spoof Tracking is a feature that detects packets with spoofed source IP addresses and logs them in SmartView Tracker. The administrator can choose to log only, log and alert, or do nothing when spoofed packets are detected. The other options are not valid tracking actions for Spoof Tracking, as they are either not available or not relevant for this feature.
Reference: [Spoof Tracking], [Firewall Administration Guide]
C
Explanation:
The tracking actions that can be selected when configuring Spoof Tracking are Log, alert, none. Spoof Tracking is a feature that detects packets with spoofed source IP addresses and logs them in SmartView Tracker. The administrator can choose to log only, log and alert, or do nothing when spoofed packets are detected. The other options are not valid tracking actions for Spoof Tracking, as they are either not available or not relevant for this feature.
Reference: [Spoof Tracking], [Firewall Administration Guide]