Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-215.81

Checkpoint 156-215.81 Exam
Check Point Certified Security Administrator R81 (Page 4 )

Updated On: 7-Feb-2026
Page 4 of 84
PDF with 411 Questions

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

  1. Go to clash-Run cpstop | Run cpstart
  2. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
  3. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores
  4. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

Answer(s): B

Explanation:

The correct answer is B because after installing a new multicore CPU, the administrator needs to configure CoreXL to make use of the additional cores and reboot the Security Gateway. Installing the Security Policy is not necessary because it does not affect the CoreXL configuration1.


Reference:

Check Point R81 Security Management Administration Guide



When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

  1. Any size
  2. Less than 20GB
  3. More than 10GB and less than 20 GB
  4. At least 20GB

Answer(s): D

Explanation:

The correct answer is D because the recommended size of the root partition for a dedicated R80 SmartEvent server is at least 20GB2. Any size, less than 20GB, or more than 10GB and less than 20GB are not sufficient for the SmartEvent server.


Reference:

Check Point R80.40 Installation and Upgrade Guide



Which firewall daemon is responsible for the FW CLI commands?

  1. fwd
  2. fwm
  3. cpm
  4. cpd

Answer(s): A

Explanation:

The correct answer is A because the fwd daemon is responsible for the FW CLI commands3. The fwm daemon handles the communication between the Security Management server and the GUI clients. The cpm daemon handles the communication between the Security Management server and SmartConsole. The cpd daemon monitors the status of critical processes on the Security Gateway.


Reference:

Check Point Firewall Processes and Daemons



If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsible, which of these steps should NOT be performed:

  1. Rename the hostname of the Standby member to match exactly the hostname of the Active member.
  2. Change the Standby Security Management Server to Active.
  3. Change the Active Security Management Server to Standby.
  4. Manually synchronize the Active and Standby Security Management Servers.

Answer(s): A

Explanation:

The correct answer is A because renaming the hostname of the Standby member to match exactly the hostname of the Active member is not a recommended step to prevent data loss. The hostname of the Standby member should be different from the hostname of the Active member1. The other steps are necessary to ensure a smooth failover and synchronization between the Active and Standby Security Management Servers2.


Reference:

Check Point R81.20 Administration Guide, 156-315.81 Checkpoint Exam Info and Free Practice Test



Using R80 Smart Console, what does a "pencil icon" in a rule mean?

  1. I have changed this rule
  2. Someone else has changed this rule
  3. This rule is managed by check point's SOC
  4. This rule can't be changed as it's an implied rule

Answer(s): A

Explanation:

The correct answer is A because a pencil icon in a rule means that you have changed this rule3. The pencil icon indicates that the rule has been modified but not published yet. You can hover over the pencil icon to see who made the change and when3. The other options are not related to the pencil icon.


Reference:

Check Point Learning and Training Frequently Asked Questions (FAQs)






Post your Comments and Discuss Checkpoint 156-215.81 exam prep with other Community members:

Join the 156-215.81 Discussion