Check Point 156-315.81.20 Practice Exams
Last updated on Oct 23,2026- Exam Code: 156-315.81.20
- Exam Name: Check Point Certified Security Expert - R81.20
- Certification Provider: Check Point
- Latest update: Oct 23,2026
Question #541
Fill in the blank: An identity server uses a _________________ to trust a Terminal Server Identity
Agent.
- A . Shared secret
- B . One-time password
- C . Certificate
- D . Token
Correct Answer: A
A
Explanation:
When configuring Terminal Servers with Identity Awareness, you must configure the same password as a shared secret in both the Terminal Servers Identity Agent on the application server that hosts the Terminal/Citrix services and on the Identity Awareness Gateway. This shared secret enables secure communication and allows the Security Gateway to trust the application server with the Terminal Servers functionality1.
Reference: Check Point Software – Configuring Terminal Servers
Check Point Identity Awareness Clients Admin Guide
Check Point Troubleshooting Expert – R81 (CCTE) Reference Materials Check Point Certified Troubleshooting Expert R81.20 – CCTE
Check Point CCTE Certification Sample Questions and Practice Exam
A
Explanation:
When configuring Terminal Servers with Identity Awareness, you must configure the same password as a shared secret in both the Terminal Servers Identity Agent on the application server that hosts the Terminal/Citrix services and on the Identity Awareness Gateway. This shared secret enables secure communication and allows the Security Gateway to trust the application server with the Terminal Servers functionality1.
Reference: Check Point Software – Configuring Terminal Servers
Check Point Identity Awareness Clients Admin Guide
Check Point Troubleshooting Expert – R81 (CCTE) Reference Materials Check Point Certified Troubleshooting Expert R81.20 – CCTE
Check Point CCTE Certification Sample Questions and Practice Exam
Question #542
Ken wants to obtain a configuration lock from other administrator on R81 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)
- A . remove database lock
- B . The database feature has one command lock database override.
- C . override database lock
- D . The database feature has two commands lock database override and unlock database. Both will work.
Correct Answer: D
D
Explanation:
Ken can use either of the two commands lock database override or unlock database to obtain a configuration lock from another administrator on R81 Security Management Server via CLI. These commands allow him to override the existing lock and gain exclusive access to the database. He can also use the WebUI to perform the same action.
Reference: Training & Certification | Check Point Software, New Courses and Certificates for R81.20 – Check Point CheckMates
D
Explanation:
Ken can use either of the two commands lock database override or unlock database to obtain a configuration lock from another administrator on R81 Security Management Server via CLI. These commands allow him to override the existing lock and gain exclusive access to the database. He can also use the WebUI to perform the same action.
Reference: Training & Certification | Check Point Software, New Courses and Certificates for R81.20 – Check Point CheckMates
Question #543
How many users can have read/write access in Gaia at one time?
- A . Infinite
- B . One
- C . Three
- D . Two
Correct Answer: B
B
Explanation:
How many users can have read/write access in Gaia at one time? Only one user can have read/write access in Gaia at one time. This is to prevent conflicts and inconsistencies in the configuration changes made by different users. If another user tries to login with read/write access while a user is already logged in, they will receive a warning message and will be given the option to either login with read-only access or force the other user to logout.
Reference: [Gaia Administration Guide R81], page 15.
B
Explanation:
How many users can have read/write access in Gaia at one time? Only one user can have read/write access in Gaia at one time. This is to prevent conflicts and inconsistencies in the configuration changes made by different users. If another user tries to login with read/write access while a user is already logged in, they will receive a warning message and will be given the option to either login with read-only access or force the other user to logout.
Reference: [Gaia Administration Guide R81], page 15.
Question #544
Check Point ClusterXL Active/Active deployment is used when:
- A . Only when there is Multicast solution set up.
- B . There is Load Sharing solution set up.
- C . Only when there is Unicast solution set up.
- D . There is High Availability solution set up.
Correct Answer: B
B
Explanation:
Check Point ClusterXL Active/Active deployment is used when there is Load Sharing solution set up. Load Sharing is a ClusterXL mode that allows distributing the network traffic between all cluster members, while still providing high availability in case of failures. Load Sharing can be configured as either Unicast or Multicast, depending on the network topology and switches support.
Reference: R81 ClusterXL Administration Guide, page 9.
B
Explanation:
Check Point ClusterXL Active/Active deployment is used when there is Load Sharing solution set up. Load Sharing is a ClusterXL mode that allows distributing the network traffic between all cluster members, while still providing high availability in case of failures. Load Sharing can be configured as either Unicast or Multicast, depending on the network topology and switches support.
Reference: R81 ClusterXL Administration Guide, page 9.
Question #544
Check Point ClusterXL Active/Active deployment is used when:
- A . Only when there is Multicast solution set up.
- B . There is Load Sharing solution set up.
- C . Only when there is Unicast solution set up.
- D . There is High Availability solution set up.
Correct Answer: B
B
Explanation:
Check Point ClusterXL Active/Active deployment is used when there is Load Sharing solution set up. Load Sharing is a ClusterXL mode that allows distributing the network traffic between all cluster members, while still providing high availability in case of failures. Load Sharing can be configured as either Unicast or Multicast, depending on the network topology and switches support.
Reference: R81 ClusterXL Administration Guide, page 9.
B
Explanation:
Check Point ClusterXL Active/Active deployment is used when there is Load Sharing solution set up. Load Sharing is a ClusterXL mode that allows distributing the network traffic between all cluster members, while still providing high availability in case of failures. Load Sharing can be configured as either Unicast or Multicast, depending on the network topology and switches support.
Reference: R81 ClusterXL Administration Guide, page 9.
Question #546
Which Identity Source(s) should be selected in Identity Awareness Tot when there is a requirement for a higher level of security for sensitive servers?
- A . Endpoint identity Agent and Browser Based Authentication
- B . AD Query
- C . Terminal Servers Endpoint Identity Agent
- D . RADIUS and Account Logon
Correct Answer: A
Question #547
What destination versions are supported for a Multi-Version Cluster Upgrade?
- A . R81.40 and later
- B . R76 and later
- C . R70 and Later
- D . R81.20 and Later
Correct Answer: D
D
Explanation:
The destination versions that are supported for a Multi-Version Cluster Upgrade are R81.20 and later. This means that the cluster members can be upgraded from any supported version to R81.20 or higher using the Multi-Version Cluster mode. R81.40, R76, and R70 are not supported destination versions for a Multi-Version Cluster Upgrade.
Reference: Check Point Software, Getting Started, Supported Upgrade Paths
D
Explanation:
The destination versions that are supported for a Multi-Version Cluster Upgrade are R81.20 and later. This means that the cluster members can be upgraded from any supported version to R81.20 or higher using the Multi-Version Cluster mode. R81.40, R76, and R70 are not supported destination versions for a Multi-Version Cluster Upgrade.
Reference: Check Point Software, Getting Started, Supported Upgrade Paths
Question #548
Which command would disable a Cluster Member permanently?
- A . clusterXL_admin down
- B . cphaprob_admin down
- C . clusterXL_admin down-p
- D . set clusterXL down-p
Correct Answer: C
C
Explanation:
The clusterXL_admin down -p command disables a Cluster Member permanently, meaning that it will not rejoin the cluster even after a reboot. The other commands either disable a Cluster Member temporarily or are invalid.
Reference: [ClusterXL Administration Guide]
C
Explanation:
The clusterXL_admin down -p command disables a Cluster Member permanently, meaning that it will not rejoin the cluster even after a reboot. The other commands either disable a Cluster Member temporarily or are invalid.
Reference: [ClusterXL Administration Guide]
Question #549
Fill in the blank: Authentication rules are defined for ________ .
- A . User groups
- B . Users using UserCheck
- C . Individual users
- D . All users in the database
Correct Answer: A
A
Explanation:
Authentication rules are defined for user groups, not individual users or all users in the database. Authentication rules allow you to control which user groups can access specific resources or services through the Security Gateway. You can define different authentication methods and schemes for different user groups, such as Check Point Password, OS Password, RADIUS, TACACS, SecurID, LDAP, or Certificate. You can also define different session timeouts and source restrictions for different user groups. Authentication rules are processed before the network access rules in the rule base.
A
Explanation:
Authentication rules are defined for user groups, not individual users or all users in the database. Authentication rules allow you to control which user groups can access specific resources or services through the Security Gateway. You can define different authentication methods and schemes for different user groups, such as Check Point Password, OS Password, RADIUS, TACACS, SecurID, LDAP, or Certificate. You can also define different session timeouts and source restrictions for different user groups. Authentication rules are processed before the network access rules in the rule base.
Question #550
What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?
- A . Anti-Bot is the only countermeasure against unknown malware
- B . Anti-Bot is the only protection mechanism which starts a counter-attack against known Command & Control Centers
- C . Anti-Bot is the only signature-based method of malware protection.
- D . Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command & Control Center.
Correct Answer: D
D
Explanation:
Anti-Bot is a post-infection malware protection that detects and blocks botnet communications from infected hosts to Command & Control servers. It is different from other Threat Prevention mechanisms that prevent malware from entering the network or executing on the hosts.
Reference: Anti-Bot Software Blade
D
Explanation:
Anti-Bot is a post-infection malware protection that detects and blocks botnet communications from infected hosts to Command & Control servers. It is different from other Threat Prevention mechanisms that prevent malware from entering the network or executing on the hosts.
Reference: Anti-Bot Software Blade