CheckPoint 156-215.81.20 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 156-215.81.20
Exam Name/Title: Check Point Certified Security Administrator R81.20
Certification Provider: CheckPoint
Corresponding Certification: CCSA

Exam Questions: 400
Updated On: Jun 01, 2026

Question #25

How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

A. Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

B. Involved traffic logs will be forwarded to a log server.

C. Provides additional information to the connected user.

D. Provides log details view email to the Administrator.

Discussion 0

Correct Answer: A Vote an answer

Question #26

A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______ types of Software Containers: ________.

A. Two; Security Management and Endpoint Security

B. Three; Security Management, Security Gateway, and Endpoint Security

C. Three; Security Gateway, Endpoint Security, and Gateway Management

D. Two; Endpoint Security and Security Gateway

Discussion 0

Correct Answer: B Vote an answer

Question #27

To view the policy installation history for each gateway, which tool would an administrator use?

A. Gateway history

B. Installation history

C. Gateway installations

D. Revisions

Discussion 0

Correct Answer: B Vote an answer

Question #28

What is the default shell of Gaia CLI?

A. Read-only

B. clish

C. Monitor

D. Bash

Discussion 0

Correct Answer: B Vote an answer

Question #29

CPU-level of your Security gateway is peaking to 100% causing problems with traffic. You suspect that the problem might be the Threat Prevention settings.
The following Threat Prevention Profile has been created.

How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

A. The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.

B. Set the Performance Impact to Very Low Confidence to Prevent.

C. Set High Confidence to Low and Low Confidence to Inactive.

D. Set the Performance Impact to Medium or lower.

Discussion 0

Correct Answer: D Vote an answer

Question #30

When an encrypted packet is decrypted, where does this happen?

A. Decryption is not supported

B. Security policy

C. Inbound chain

D. Outbound chain

Discussion 0

Correct Answer: B Vote an answer

Question #31

Fill in the blank: An identity server uses a ___________ for user authentication.

A. One-time password

B. Shared secret

C. Token

D. Certificate

Discussion 0

Correct Answer: B Vote an answer

Question #32

When a gateway requires user information for authentication, what order does it query servers for user information?

A. The external generic profile, then the internal user database finally the LDAP servers in order of priority.

B. First the highest priority LDAP server, then the internal user database, then lower priority LDAP servers, finally the generic external profile

C. First - Internal user database, then LDAP servers in order of priority, finally the generic external user profile

D. First the Internal user database, then generic external user profile, finally LDAP servers in order of priority.

Discussion 0

Correct Answer: D Vote an answer

Question #33

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain Why does it not detect the windows domain?

A. Identity Awareness is not enabled on Global properties

B. Security Gateway is not part of the Domain

C. SmartConsole machine is not part of the domain

D. Security Management Server is not part of the domain

Discussion 0

Correct Answer: C Vote an answer

Question #34

Which of the following commands is used to verify license installation?

A. Cplic show

B. Cplic license

C. Cplic verify license

D. Cplic print

Discussion 0

Correct Answer: D Vote an answer

Question #35

What is the Transport layer of the TCP/IP model responsible for?

A. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.

B. It transports packets as datagrams along different routes to reach their destination.

C. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.

D. It deals with all aspects of the physical components of network connectivity and connects with different network types.

Discussion 0

Correct Answer: C Vote an answer

Question #36

Which two Identity Awareness daemons are used to support identity sharing?

A. Policy Activation Point (PAP) and Policy Decision Point (PDP)

B. Policy Manipulation Point (PMP) and Policy Activation Point (PAP)

C. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

D. Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

Discussion 0

Correct Answer: C Vote an answer

Download Free CheckPoint 156-215.81.20 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-215.81.20 exam.