Free 156-215.81 Exam Braindumps
Check Point Certified Security Administrator R81 Questions 191–195 (page: 40)

Updated On: 10-Feb-2026

Which of the following is NOT a valid deployment option for R80?

  1. All-in-one (stand-alone)
  2. Log server
  3. SmartEvent
  4. Multi-domain management server

Answer(s): D

Explanation:

Multi-domain management server is a valid deployment option for R81, not R80. R80 supports multi-domain security management, which is a centralized management solution for large-scale, distributed environments with many different domain networks1.


Reference:

Multi-Domain Security Management Administration Guide R80



You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

  1. Right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"
  2. On the firewall object, Legacy Authentication screen, check "Enable Identity Captive Portal"
  3. In the Captive Portal screen of Global Properties, check "Enable Identity Captive Portal"
  4. On the Security Management Server object, check the box "Identity Logging"

Answer(s): A

Explanation:

Identity Captive Portal is a Check Point Identity Awareness web portal, to which users connect with their web browser to log in and authenticate, when using Browser-Based Authentication2. To enable Identity Captive Portal for a specific rule, you need to right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"3.


Reference:

Identity Awareness Administration Guide R80, Identity awareness with captive portal in Checkpoint R80



Identity Awareness allows the Security Administrator to configure network access based on which of the following?

  1. Name of the application, identity of the user, and identity of the machine
  2. Identity of the machine, username, and certificate
  3. Network location, identity of a user, and identity of a machine
  4. Browser-Based Authentication, identity of a user, and network location

Answer(s): C

Explanation:

Identity Awareness allows the Security Administrator to configure network access based on network location, identity of a user, and identity of a machine1. These are the three main identity sources that Identity Awareness supports1.


Reference:

Identity Awareness R80.40 Administration Guide



Which option will match a connection regardless of its association with a VPN community?

  1. All Site-to-Site VPN Communities
  2. Accept all encrypted traffic
  3. All Connections (Clear or Encrypted)
  4. Specific VPN Communities

Answer(s): B

Explanation:

Accept all encrypted traffic is the option that will match a connection regardless of its association with a VPN community2. This option allows encrypted traffic from any VPN peer, even if it is not defined in a VPN community2.


Reference:

Site to Site VPN in R80.x - Tutorial for Beginners



Which of the following is NOT a tracking log option in R80.x?

  1. Log
  2. Full Log
  3. Detailed Log
  4. Extended Log

Answer(s): C

Explanation:

Detailed Log is not a valid tracking log option in R80.x3. The tracking log options in R80.x are Log,

Full Log, and Extended Log45.


Reference:

Where is `full log' option in track column, LOGGINGAND MONITORING R80, Logging and Monitoring Administration Guide R80.20



Viewing page 40 of 84
Viewing questions 196 - 200 out of 411 questions


Post your Comments and Discuss Checkpoint 156-215.81 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!