Free 156-215.80 Exam Braindumps
Check Point Certified Security Administrator (CCSA R80) Questions 166–170 (page: 35)

Updated On: 10-Feb-2026

How many users can have read/write access in Gaia at one time?

  1. Infinite
  2. One
  3. Three
  4. Two

Answer(s): B



Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

  1. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.
  2. She needs to run sysconfig and restart the SSH process.
  3. She needs to edit /etc/scpusers and add the Standard Mode account.
  4. She needs to run cpconfig to enable the ability to SCP files.

Answer(s): C



John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.

John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:

1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.

John plugged in his laptop to the network on a different network segment and he is not able to connect. How does he solve this problem?

  1. John should install the identity Awareness Agent
  2. The firewall admin should install the Security Policy
  3. John should lock and unlock the computer
  4. Investigate this as a network connectivity issue

Answer(s): C



Which feature in R77 permits blocking specific IP addresses for a specified time period?

  1. Suspicious Activity Monitoring
  2. HTTP Methods
  3. Local Interface Spoofing
  4. Block Port Overflow

Answer(s): A



MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks try to reach the Google DNS (8.8.8.8) server.
What can you do in this case?

  1. Use manual NAT rule to make an exception
  2. Use the NAT settings in the Global Properties
  3. Disable NAT inside the VPN community
  4. Use network exception in the Alpha-internal network object

Answer(s): D



Viewing page 35 of 108
Viewing questions 171 - 175 out of 536 questions


Post your Comments and Discuss Checkpoint 156-215.80 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!