Free 156-215.82 Exam Braindumps
Check Point Certified Security Administrator R82 Questions 81–85 (page: 18)

Updated On: 16-Mar-2026

What of the following is NOT an Identity Source supported by the Check Point Identity Awareness Blade?

  1. Remote Access and Terminal Servers.
  2. Identity Connector and TACACS
  3. Browser-Based Authentication and AD Query.
  4. RADIUS Accounting, Identity Collector.

Answer(s): B

Explanation:

TACACS is not supported as an identity source by the Identity Awareness blade, whereas the other options list supported mechanisms used to collect user identity information.



Which Identity Source provides identity information through Captive Portal login or Transparent Kerberos Authentication?

  1. Browser-Based Authentication
  2. Identity Agents
  3. RADIUS Accounting
  4. AD Query

Answer(s): A

Explanation:

Browser-Based Authentication provides identity information by prompting users to authenticate through a Captive Portal or by using Transparent Kerberos Authentication, allowing the gateway to associate user identity with network traffic.



What is the purpose of the Policy Enforcement Point (PEP) in Identity Awareness?

  1. To receive identity data from identity sources
  2. To organize identity data
  3. To store logs of user activity
  4. To enforce network access restrictions based on identity

Answer(s): D

Explanation:

The Policy Enforcement Point applies the security policy by enforcing network access restrictions on traffic according to the user or machine identity information.



Which HTTPS Inspection setting allows bypassing connections to software update services?

  1. Fail Mode
  2. Categorization Mode
  3. Bypass Allow List
  4. Certificate Blocking

Answer(s): C

Explanation:

The Bypass Allow List allows specific destinations, such as software update services, to bypass HTTPS Inspection so encrypted connections can proceed without decryption or inspection.



After enabling and configuring Outbound HTTPS inspection on Security Gateway, you need to prevent users from getting warnings about the generated CA certificates that HTTPS Inspection uses.

In which certificate store do you need to add exported HTTPS Inspection certificate to client computer?

  1. Third-party Root Certification Authorities certificate store - (Local Computer)
  2. Trusted Root Certification Authorities certificate store - (Local computer)
  3. Third-party Root Certification Authorities certificate store - (Current User)
  4. Trusted Root Certification Authorities certificate store - (Current user)

Answer(s): B

Explanation:

The HTTPS Inspection CA certificate must be installed in the Trusted Root Certification Authorities store of the local computer so client systems trust certificates generated by the Security Gateway and do not display browser warnings.



Viewing page 18 of 37
Viewing questions 86 - 90 out of 197 questions


Post your Comments and Discuss Checkpoint 156-215.82 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!