DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Pass Your Check Point 156-215 Certification Questions & Practice Tests, Check Point Certified Security Administrator R80 | SPOTO

Preparing for the Check Point Certified Security Administrator (CCSA) R80 certification? Our latest 156-215 certification questions and practice tests are invaluable study resources. Access hundreds of realistic online exam questions, sample questions, and mock exams covering Security Gateway, Management Software Blades, and the GAiA operating system. These authentic exam dumps allow you to practice just like the actual certification exam. Identify knowledge gaps through our comprehensive test prep featuring exam questions and answers. Regular practice with these free test materials is proven to boost your skills and confidence for passing the challenging CCSA R80 exam. Start today with our latest certification practice tests - experiencing the actual exam format could make the difference in your success!
Take other online exams
Question #1
To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?
A. Protections
B. IPS Protections
C. Profiles
D. ThreatWiki
View answer
Correct Answer: B
Question #2
Which of the following are types of VPN communicaties?
A. Pentagon, star, and combination
B. Star, octagon, and combination
C. Combined and star
D. Meshed, star, and combination
View answer
Correct Answer: D
Question #3
Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?
A. AES-GCM-256
B. AES-CBC-256
C. AES-GCM-128
D. DES
View answer
Correct Answer: B
Question #4
Which application should you use to install a contract file?
A. SmartView Monitor
B. WebUI
C. SmartUpdate
D. SmartProvisioning
View answer
Correct Answer: C
Question #5
Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?
A. https://
B. https://:443
C. https://:10000
D. https://:4434
View answer
Correct Answer: A
Question #6
When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?
A. RADIUS
B. Remote Access and RADIUS
C. All of the above
D. AD Query and Browser-based Authentication
View answer
Correct Answer: D
Question #7
Examine the sample Rule Base. What will be the result of a verification of the policy from SmartConsole?
A. No errors or Warnings
B. Verification Error: Empty Source-List and Service-List in Rule 5 (Mail Inbound)
C. Verification Error: Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)
D. Verification Error: Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule
View answer
Correct Answer: C
Question #8
ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?
A. The Gaia /bin/confd is locked by another administrator from a SmartConsole session
B. The database is locked by another administrator SSH session
C. The Network address of his computer is in the blocked hosts
D. The IP address of his computer is not in the allowed hosts
View answer
Correct Answer: B
Question #9
Which two Identity Awareness commands are used to support identity sharing?
A. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)
B. Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
C. Policy Manipulation Point (PMP) and Policy Activation Point (PAP)
D. Policy Activation Point (PAP) and Policy Decision Point (PDP)
View answer
Correct Answer: A
Question #10
There are ________ types of software containers ________.
A. Three; security management, Security Gateway, and endpoint security
B. Three; Security gateway, endpoint security, and gateway management
C. Two; security management and endpoint security
D. Two; endpoint security and Security Gateway
View answer
Correct Answer: A
Question #11
What does the “unknown” SIC status shown on SmartConsole mean?
A. The SMS can contact the Security Gateway but cannot establish Secure Internal Communication
B. SIC activation key requires a reset
C. The SIC activation key is not known by any administrator
D. There is no connection between the Security Gateway and SMS
View answer
Correct Answer: D
Question #12
The destination server for Security Gateway logs depends on a Security Management Server configuration.
A. False, log servers are configured on the Log Server General Properties
B. True, all Security Gateways will only forward logs with a SmartCenter Server configuration
C. True, all Security Gateways forward logs automatically to the Security Management Server
D. False, log servers are enabled on the Security Gateway General Properties
View answer
Correct Answer: B
Question #13
Which repositories are installed on the Security Management Server by SmartUpdate?
A. License and Update
B. Package Repository and Licenses
C. Update and License & Contract
D. License & Contract and Package Repository
View answer
Correct Answer: D
Question #14
When should you generate new licenses?
A. Before installing contract files
B. After an RMA procedure when the MAC address or serial number of the appliance changes
C. When the existing license expires, license is upgraded, or the IP-address where the license is tied changes
D. Only when the license is upgraded
View answer
Correct Answer: B
Question #15
Which of the following is TRUE regarding Gaia command line?
A. Configuration changes should be done in mgmt_cli and use CLISH for monitoring
B. Configuration changes should be done in expert-mode and CLISH is used for monitoring
C. Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks
D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks
View answer
Correct Answer: D
Question #16
By default, which port does the WebUI listen on?
A. 80
B. 4434
C. 443
D. 8080
View answer
Correct Answer: C
Question #17
You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?
A. Open SmartLog and connect remotely to the wireless controller
B. Open SmartEvent to see why they are being blocked
C. Open SmartDashboard and review the logs tab
D. Open SmartLog and filter for the IP address of the tablet
View answer
Correct Answer: D
Question #18
Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?
A. Editor
B. Read Only All
C. Super User
D. Full Access
View answer
Correct Answer: B
Question #19
What protocol is specifically used for clustered environments?
A. Cluster Protocol
B. Synchronized Cluster Protocol
C. Control Cluster Protocol
D. Cluster Control Protocol
View answer
Correct Answer: D
Question #20
Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI. Which command should he use in CLI? Choose the correct answer.
A. remove database lock
B. The database feature has one command lock database override
C. override database lock
D. The database feature has two commands: lock database override and unlock database
View answer
Correct Answer: D
Question #21
Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?
A. Security questions
B. Check Point password
C. SecurID
D. RADIUS
View answer
Correct Answer: A
Question #22
You have enabled “Full Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?
A. Logging has disk space issues
B. Data Awareness is not enabled
C. Identity Awareness is not enabled
D. Logs are arriving from Pre-R80 gateways
View answer
Correct Answer: A
Question #23
Which of the following is NOT a role of the SmartCenter:
A. Status monitoring
B. Policy configuration
C. Certificate authorityD
View answer
Correct Answer: C
Question #24
Default port numbers for an LDAP server is ______ for standard connections and _______ SSL connections.
A. 675, 389
B. 389, 636
C. 636, 290
D. 290, 675
View answer
Correct Answer: B
Question #25
Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made?
A. Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of this work
B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot
C. Tom’s changes will be lost since he lost connectivity and he will have to start again
D. Tom will have to reboot his SmartConsole computer, clear the cache and restore changes
View answer
Correct Answer: A
Question #26
Which of the following is NOT a valid deployment option for R80?
A. All-in-one (stand-alone)
B. CloudGuard
C. Distributed
D. Bridge Mode
View answer
Correct Answer: B
Question #27
Which of the following is NOT a component of Check Point Capsule?
A. Capsule Docs
B. Capsule Cloud
C. Capsule Enterprise
D. Capsule Workspace
View answer
Correct Answer: C
Question #28
Packages and licenses are loaded from all of these sources EXCEPT
A. Download Center Web site
B. UserUpdate
C. User Center
D. Check Point DVD
View answer
Correct Answer: B
Question #29
Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?
A. set web ssl-port
B. set Gaia-portal port
C. set Gaia-portal https-port
D. set web https-port
View answer
Correct Answer: A
Question #30
Which of the following commands can be used to remove site-to-site IPSEC Security Associations (SA)?
A. vpn tu
B. vpn ipsec remove -l
C. vpn debug ipsec
D. fw ipsec tu
View answer
Correct Answer: A
Question #31
What is the order of NAT priorities?
A. Static NAT, IP pool NAT, hide NAT
B. IP pool NAT, static NAT, hide NAT
C. Static NAT, automatic NAT, hide NAT
D. Static NAT, hide NAT, IP pool NAT
View answer
Correct Answer: A

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.