Check Point 156-215.81.20 Practice Exams
Last updated on Oct 23,2026- Exam Code: 156-215.81.20
- Exam Name: Check Point Certified Security Administrator R81.20
- Certification Provider: Check Point
- Latest update: Oct 23,2026
Question #381
How many layers make up the TCP/IP model?
- A . 2
- B . 7
- C . 6
- D . 4
Correct Answer: D
D
Explanation:
The TCP/IP model is made up of four layers: Application, Transport, Internet, and Network Interface1,
p. 10. The TCP/IP model is a simplified version of the OSI model, which has seven layers: Application,
Presentation, Session, Transport, Network, Data Link, and Physical.
Reference: Check Point CCSA –
R81: Practice Test & Explanation, [TCP/IP Model Explained]
D
Explanation:
The TCP/IP model is made up of four layers: Application, Transport, Internet, and Network Interface1,
p. 10. The TCP/IP model is a simplified version of the OSI model, which has seven layers: Application,
Presentation, Session, Transport, Network, Data Link, and Physical.
Reference: Check Point CCSA –
R81: Practice Test & Explanation, [TCP/IP Model Explained]
Question #382
What object type would you use to grant network access to an LDAP user group?
- A . Access Role
- B . User Group
- C . SmartDirectory Group
- D . Group Template
Correct Answer: B
B
Explanation:
The Access Role object type is used to grant network access to an LDAP user group. It defines a set of users and machines that can access a specific network resource34
Reference: Access Role, LDAP User Group
B
Explanation:
The Access Role object type is used to grant network access to an LDAP user group. It defines a set of users and machines that can access a specific network resource34
Reference: Access Role, LDAP User Group
Question #383
Most Check Point deployments use Gaia but which product deployment utilizes special Check Point code (with unification in R81.10)?
- A . Enterprise Network Security Appliances
- B . Rugged Appliances
- C . Scalable Platforms
- D . Small Business and Branch Office Appliances
Correct Answer: C
C
Explanation:
Most Check Point deployments use Gaia, which is a unified operating system for all Check Point appliances, open servers, and virtualized gateways. However, some product deployments utilize special Check Point code, such as Scalable Platforms (formerly known as Maestro), which are high-performance security gateways that can scale up to 1.5 Tbps of firewall throughput. Scalable Platforms use a special version of Gaia OS called Gaia Embedded, which is planned to be unified with Gaia OS in R81.102.
Reference: Check Point R81 Release Notes
C
Explanation:
Most Check Point deployments use Gaia, which is a unified operating system for all Check Point appliances, open servers, and virtualized gateways. However, some product deployments utilize special Check Point code, such as Scalable Platforms (formerly known as Maestro), which are high-performance security gateways that can scale up to 1.5 Tbps of firewall throughput. Scalable Platforms use a special version of Gaia OS called Gaia Embedded, which is planned to be unified with Gaia OS in R81.102.
Reference: Check Point R81 Release Notes
Question #384
URL Filtering cannot be used to:
- A . Control Bandwidth issues
- B . Control Data Security
- C . Improve organizational security
- D . Decrease legal liability
Correct Answer: A
A
Explanation:
URL Filtering is a blade that enables administrators to control access to millions of websites by category, users, groups, and machines. URL Filtering can be used to improve organizational security, decrease legal liability, and control data security by preventing users from accessing malicious or inappropriate websites. However, URL Filtering cannot be used to control bandwidth issues, such as limiting the amount of traffic or prioritizing certain applications over others3. For that purpose, other blades such as QoS (Quality of Service) or SecureXL are more suitable.
Reference: Check Point R81 URL Filtering Administration Guide
A
Explanation:
URL Filtering is a blade that enables administrators to control access to millions of websites by category, users, groups, and machines. URL Filtering can be used to improve organizational security, decrease legal liability, and control data security by preventing users from accessing malicious or inappropriate websites. However, URL Filtering cannot be used to control bandwidth issues, such as limiting the amount of traffic or prioritizing certain applications over others3. For that purpose, other blades such as QoS (Quality of Service) or SecureXL are more suitable.
Reference: Check Point R81 URL Filtering Administration Guide
Question #385
Fill in the blank: When a policy package is installed, ________ are also distributed to the target
installation Security Gateways.
- A . User and objects databases
- B . Network databases
- C . SmartConsole databases
- D . User databases
Correct Answer: A
A
Explanation:
When a policy package is installed, user and objects databases are also distributed to the target installation Security Gateways14. The user and objects databases contain information about network objects, users, groups, services, VPN domains, and more14. Therefore, the correct answer is A. User and objects databases.
A
Explanation:
When a policy package is installed, user and objects databases are also distributed to the target installation Security Gateways14. The user and objects databases contain information about network objects, users, groups, services, VPN domains, and more14. Therefore, the correct answer is A. User and objects databases.
Question #386
When configuring LDAP User Directory integration, Changes applied to a User Directory template are:
- A . Reflected immediately for all users who are using template.
- B . Not reflected for any users unless the local user template is changed.
- C . Reflected for all users who are using that template and if the local user template is changed as well.
- D . Not reflected for any users who are using that template.
Correct Answer: A
A
Explanation:
The answer is A because changes applied to a User Directory template are reflected immediately for all users who are using that template. A User Directory template defines the settings for connecting to an LDAP server, such as the server name, port, base DN, user filter, and group filter. When a User Directory template is modified, all users who are using that template will inherit the changes without requiring any additional actions3
Reference: Check Point R81 Identity Awareness Administration Guide, [Check Point R81 User Directory Templates]
A
Explanation:
The answer is A because changes applied to a User Directory template are reflected immediately for all users who are using that template. A User Directory template defines the settings for connecting to an LDAP server, such as the server name, port, base DN, user filter, and group filter. When a User Directory template is modified, all users who are using that template will inherit the changes without requiring any additional actions3
Reference: Check Point R81 Identity Awareness Administration Guide, [Check Point R81 User Directory Templates]
Question #387
True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway
- A . True, CLI is the prefer method for Licensing
- B . False, Central License are handled via Security Management Server
- C . False, Central License are installed via Gaia on Security Gateways
- D . True, Central License can be installed with CPLIC command on a Security Gateway
Correct Answer: D
D
Explanation:
In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway using the CPLIC command1. This command allows you to install a license from a file or from the User Center1. Therefore, the correct answer is D. True, Central License can be installed with CPLIC command on a Security Gateway.
D
Explanation:
In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway using the CPLIC command1. This command allows you to install a license from a file or from the User Center1. Therefore, the correct answer is D. True, Central License can be installed with CPLIC command on a Security Gateway.
Question #388
Which of the following is NOT a tracking log option in R80.x?
- A . Log
- B . Full Log
- C . Detailed Log
- D . Extended Log
Correct Answer: C
C
Explanation:
Detailed Log is not a valid tracking log option in R80.x3. The tracking log options in R80.x are Log, Full Log, and Extended Log45.
Reference: Where is ‘full log’ option in track column, LOGGINGAND MONITORING R80, Logging and Monitoring Administration Guide R80.20
C
Explanation:
Detailed Log is not a valid tracking log option in R80.x3. The tracking log options in R80.x are Log, Full Log, and Extended Log45.
Reference: Where is ‘full log’ option in track column, LOGGINGAND MONITORING R80, Logging and Monitoring Administration Guide R80.20
Question #389
Which two Identity Awareness commands are used to support identity sharing?
- A . Policy Decision Point (PDP) and Policy Enforcement Point (PEP)
- B . Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
- C . Policy Manipulation Point (PMP) and Policy Activation Point (PAP)
- D . Policy Activation Point (PAP) and Policy Decision Point (PDP)
Correct Answer: A
A
Explanation:
The answer is A because Identity Awareness commands are used to support identity sharing between Security Gateways. Policy Decision Point (PDP) is the Security Gateway that collects identities from various sources and shares them with other gateways. Policy Enforcement Point (PEP) is the Security Gateway that enforces the policy based on the identities received from the PDP12
Reference: Check Point R81 Identity Awareness Administration Guide, Check Point R81
Security Management Administration Guide
A
Explanation:
The answer is A because Identity Awareness commands are used to support identity sharing between Security Gateways. Policy Decision Point (PDP) is the Security Gateway that collects identities from various sources and shares them with other gateways. Policy Enforcement Point (PEP) is the Security Gateway that enforces the policy based on the identities received from the PDP12
Reference: Check Point R81 Identity Awareness Administration Guide, Check Point R81
Security Management Administration Guide
Question #390
Which Threat Prevention Profile is not included by default in R80 Management?
- A . Basic C Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance
- B . Optimized C Provides excellent protection for common network products and protocols against recent or popular attacks
- C . Strict C Provides a wide coverage for all products and protocols, with impact on network performance
- D . Recommended C Provides all protection for all common network products and servers, with impact on network performance
Correct Answer: D
D
Explanation:
The default Threat Prevention Profiles in R80 Management are Basic, Optimized, and Strict1. There is no Recommended profile by default. You can create a custom profile and name it Recommended, but it is not included by default.
Reference: Check Point R81 Threat Prevention Administration Guide
D
Explanation:
The default Threat Prevention Profiles in R80 Management are Basic, Optimized, and Strict1. There is no Recommended profile by default. You can create a custom profile and name it Recommended, but it is not included by default.
Reference: Check Point R81 Threat Prevention Administration Guide