Free 156-215.80 Exam Braindumps
Check Point Certified Security Administrator (CCSA R80) Questions 106–110 (page: 23)

Updated On: 10-Feb-2026

Which of the following is NOT an advantage to using multiple LDAP servers?

  1. You achieve a faster access time by placing LDAP servers containing the database at remote sites
  2. Information on a user is hidden, yet distributed across several servers
  3. You achieve compartmentalization by allowing a large number of users to be distributed across several servers
  4. You gain High Availability by replicating the same information on several servers

Answer(s): B



Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

  1. Firewall
  2. Application Control
  3. Anti-spam and Email Security
  4. Antivirus

Answer(s): D

Explanation:

The enhanced Check Point Antivirus Software Blade uses real-time virus signatures and anomaly-based protections from ThreatCloud™, the first collaborative network to fight cybercrime, to detect and block malware at the gateway before users are affected.


Reference:

https://www.checkpoint.com/products/antivirus-software-blade/



What is the default method for destination NAT?

  1. Destination side
  2. Source side
  3. Server side
  4. Client side

Answer(s): D

Explanation:

Client Side NAT - destination is NAT`d by the inbound kernel



Choose what BEST describes a Session.

  1. Starts when an Administrator publishes all the changes made on SmartConsole.
  2. Starts when an Administrator logs in to the Security Management Server through SmartConsole and ends when it is published.
  3. Sessions ends when policy is pushed to the Security Gateway.
  4. Sessions locks the policy package for editing.

Answer(s): B

Explanation:

Administrator Collaboration
More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators. When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited.
To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.


Reference:

https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/117948



Which of the following is NOT a VPN routing option available in a star community?

  1. To satellites through center only
  2. To center, or through the center to other satellites, to Internet and other VPN targets
  3. To center and to other satellites through center
  4. To center only

Answer(s): A,D

Explanation:

SmartConsole
For simple hubs and spokes (or if there is only one Hub), the easiest way is to configure a VPN star community in R80 SmartConsole:
1. On the Star Community window, in the:
a). Center Gateways section, select the Security Gateway that functions as the "Hub".
b). Satellite Gateways section, select Security Gateways as the "spokes", or satellites.
2. On the VPN Routing page, Enable VPN routing for satellites section, select one of these options:
a). To center and to other Satellites through center - This allows connectivity between the Security Gateways, for example if the spoke Security Gateways are DAIP Security Gateways, and the Hub is a Security Gateway with a static IP address.
b). To center, or through the center to other satellites, to internet and other VPN targets - This allows connectivity between the Security Gateways as well as the ability to inspect all communication passing through the Hub to the Internet.
3. Create an appropriate Access Control Policy rule.
4. NAT the satellite Security Gateways on the Hub if the Hub is used to route connections from Satellites to the Internet.
The two Dynamic Objects (DAIP Security Gateways) can securely route communication through the Security Gateway with the static IP address.


Reference:

https://sc1.checkpoint.com/documents/R80/CP_R80BC_VPN/html_frameset.htm



Viewing page 23 of 108
Viewing questions 111 - 115 out of 536 questions


Post your Comments and Discuss Checkpoint 156-215.80 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!