CheckPoint 156-315.13 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 156-315.13
Exam Name/Title: Check Point Certified Security Expert
Certification Provider: CheckPoint
Corresponding Certification: CCSE

Exam Questions: 639
Updated On: Aug 08, 2026

Question #1

Which internal user authentication protocols are supported in SSL VPN?

A. Check Point Password, SecurID, L2TP, RADIUS, TACACS

B. Check Point Password, SecurID, LDAP, RADIUS, TACACS

C. Check Point Password, SecurID, Active Directory, RADIUS, TACACS

D. Point Password, SecurID, OS Password, RADIUS, TACACS

Discussion 0

Correct Answer: D Vote an answer

Question #2

What is a task of the SmartEvent Correlation Unit?

A. Add events to the events database.

B. Display the received events.

C. Assign a severity level to an event

D. Look for patterns according to the installed Event Policy.

Discussion 0

Correct Answer: D Vote an answer

Question #3

Concerning these products: SecurePlatform, VPN-1 Pro Gateway, UserAuthority Server, Nokia OS, UTM-1, Eventia Reporter, and Performance Pack, which statement is TRUE?

A. All can be upgraded to VPN-1 NGX R65 with SmartUpdate.

B. All but the UTM-1 can be upgraded to VPN-1 NGX R65 with SmartUpdate.

C. All but the Nokia OS can be upgraded to VPN-1 NGX R65 with SmartUpdate.

D. All but Performance Pack can be upgraded to VPN-1 NGX R65 with SmartUpdate.

Discussion 0

Correct Answer: A Vote an answer

Question #4

You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connection Rejection?

A. The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.

B. The guarantee of one of the rule's sub-rules exceeds the guarantee in the rule itself.

C. Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.

D. The Constant Bit Rate for a Low Latency Class has been exceeded by greater than 10%, and the Maximal Delay is set below requirements.

Discussion 0

Correct Answer: A Vote an answer

Question #5

Based on the following information, which of the statements below is FALSE?
A DLP Rule Base has the following conditions: Data Type =Password Protected File Source=My Organization Destination=Outside My Organization Protocol=Any Action=Ask User Exception: Data Type=Any,
Source=Research and Development (R&D) Destination=Pratner1.com Protocol=Any
All other rules are set to Detect. UserCheck is enabled and installed on all client machines.

A. When a user from R&D sends an e-mail with a password protected PDF file as an attachment to xyz@partner1 .com, he will be prompted by UserCheck.

B. Another rule is added: Source = R&D, Destination = partner1.com, Protocol = Any, Action = Inform. When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to, he will be prompted by UserCheck.

C. When a user from Finance sends an e-mail with an encrypted ZIP file as an attachment to. He will be prompted by UserCheck.

D. When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to , he will NOT be prompted by UserCheck.

Discussion 0

Correct Answer: C Vote an answer

Question #6

The following diagram illustrates how a VPN-1 SecureClient user tries to establish a VPN with hosts in the external_net and internal_net from the Internet. How is the Security Gateway VPN Domain created?

A. Internal Gateway VPN Domain = internal_net;
External VPN Domain = external net + external gateway object + internal_net.

B. Internal Gateway VPN Domain = internal_net.
External Gateway VPN Domain = internal VPN Domain + internal gateway object + external_net

C. Internal Gateway VPN Domain = internal_net;
External Gateway VPN Domain = internal_net + external_net

D. Internal Gateway VPN Domain = internal_net.
External Gateway VPN Domain = external_net + internal gateway object

Discussion 0

Correct Answer: B Vote an answer

Question #7

When a security administrator logs in to SmartDashboard and selects Continue without session from the following window, what kind of access will be granted to him in SmartDashboard?

A. He will get read-only access to the policy and network objects; however, he can still manage the sessions, i.e. Approve, Request Repair etc.

B. No access will be granted, he will be logged out of SmartDashboard.

C. A new session will automatically be created with a default session name along with date and time. All changes made by the manager will be saved in this new session.

D. He will get read-only access to the policy, network objects and session management.

Discussion 0

Correct Answer: A Vote an answer

Question #8

Where multiple SmartDirectory servers exist in an organization, a query from one of the clients for user information is made to the servers based on a priority. By what category can this priority be defined?

A. Gateway or Domain

B. Location or Account Unit

C. Location or Domain

D. Gateway or Account Unit

Discussion 0

Correct Answer: D Vote an answer

Question #9

Which Remote Desktop protocols are supported natively in SSL VPN?

A. AT&T VNC, Citrix ICA and Microsoft RDP

B. Microsoft RDP only

C. Citrix ICA and Microsoft RDP

D. AT&T VNC and Microsoft RDP

Discussion 0

Correct Answer: C Vote an answer

Question #10

In a particular IPS protection in R76 in the Logging Settings, what does the Capture Packets option do?

A. This is not a valid selection in R76

B. Collects all of the logs for packets that have matched this protection within the last 30 days

C. Starts a packet capture at the time of policy install to capture all of the traffic until this protection is hit.

D. Attaches a packet capture of the traffic that matches this particular protection to each log that the protection generates.

Discussion 0

Correct Answer: D Vote an answer

Question #11

Your customer wishes to use SmartWorkflow Software Blade, but he also wishes to install a policy during an emergency without an approval. Is it possible?

A. Yes, it is possible, but this feature must be configured in Global Properties and the administrator must provide a special password.

B. No, if a customer uses the SmartWorkflow Software Blade, a policy must be approved.

C. Yes, it is possible but the administrator must receive special administrator permission, i.e., Can install in emergency. You can use the new GUI to set the administration security setting.

D. Yes, it is possible, but this feature must be configured in the Global Properties. The administrator must provide a special password and the reason for this emergency installation.

Discussion 0

Correct Answer: D Vote an answer

Download Free CheckPoint 156-315.13 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-315.13 exam.