156–215.81: A Measured Distance Between Precision, Silence, and Uncertainty
                     CheckPoint
156-215.81
ExamName: Check Point Certified Security Administrator R81.20
Exam Version: 14.1
Questions & Answers Sample PDF
(Preview content before you buy)
Check the full version using the link below.
https://pass2certify.com/exam/156-215.81
Unlock Full Features:
Stay Updated: 90 days of free exam updates
Zero Risk: 30-day money-back policy
Instant Access: Download right after purchase
Always Here: 24/7 customer support team
https://pass2certify.com//exam/156-215.81 Page 1 of 5
Question 1. (Multi Select)
Which of the following is NOT a tracking option? (Select three)
A: Partial log
B: Log
C: Network log
D: Full log
Answer: A, C, D
Explanation:
The options that are not tracking options are Partial log, Network log, and Full log. Tracking options are
settings that determine how the Security Gateway handles traffic that matches a rule in the security policy.
The valid tracking options are Log, Detailed Log, Extended Log, Alert, Mail, SNMP trap, User Defined Alert,
and None. The other options are incorrect. Log is a tracking option that records basic information about the
traffic, such as source, destination, service, action, etc. Detailed Log is a tracking option that records
additional information about the traffic, such as NAT details, data amount, etc. Extended Log is a tracking
option that records even more information about the traffic, such as matched IPS protections, application
details, etc. [Logging and Monitoring Administration Guide R80 - Check Point Software]
Question 2. (Single Select)
Which is a suitable command to check whether Drop Templates are activated or not?
A: fw ctl get int activate_drop_templates
B: fwaccel stat
C: fwaccel stats
D: fw ctl templates –d
Answer: B
Explanation:
https://pass2certify.com//exam/156-215.81 Page 2 of 5
The command fwaccel stat shows the status of SecureXL, including whether Drop Templates are enabled
or not1. Check Point SecureXL R81 Administration Guide
Question 3. (Single Select)
Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?
A: The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in
the order in which they are defined, allowing control over the rule base flow and which security
functionalities take precedence.
B: Limits the upload and download throughput for streaming media in the company to 1 Gbps.
C: Time object to a rule to make the rule active only during specified times.
D: Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched,
inspection will continue in the sub policy attached to it rather than in the next rule.
Answer: D
Explanation:
Sub Policies are a new feature in R80.10 Gateway that allow creating and attaching sets of rules to specific
rules in the main policy4. Sub Policies are useful for delegating permissions, managing large rule bases,
and applying different inspection profiles4. The other options are not new features in R80.10 Gateway.
Check Point R80.10 Security Management Administration Guide
Question 4. (Single Select)
What are the three components for Check Point Capsule?
A: Capsule Docs, Capsule Cloud, Capsule Connect
B: Capsule Workspace, Capsule Cloud, Capsule Connect
C: Capsule Workspace, Capsule Docs, Capsule Connect
D: Capsule Workspace, Capsule Docs, Capsule Cloud
Answer: D
https://pass2certify.com//exam/156-215.81 Page 3 of 5
Explanation:
The three components for Check Point Capsule are Capsule Workspace, Capsule Docs, and Capsule
Cloud123. Capsule Workspace provides a secure container on the mobile device that isolates business
data and applications from personal data and applications2. Capsule Docs protects business documents
everywhere they go with encryption and access control1. Capsule Cloud provides cloud-based security
services to protect mobile users from threats3. Check Point Capsule, Check Point Capsule
Workspace, Mobile Secure Workspace with Capsule
Question 5. (Single Select)
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
A: UDP port 265
B: TCP port 265
C: UDP port 256
D: TCP port 256
Answer: B
Explanation:
The port used for full synchronization between cluster members is TCP port 2654. This port is used by the
Firewall Kernel to send and receive synchronization data, such as connection tables, NAT tables, and VPN
keys4. UDP port 8116 is used by the Cluster Control Protocol (CCP) for internal communications between
cluster members4. How does the Cluster Control Protocol function in working and failure scenarios for
gateway clusters?
https://pass2certify.com//exam/156-215.81 Page 4 of 5
Need more info? Check the link below:
https://pass2certify.com/exam/156-215.81
Thanks for Being a Valued Pass2Certify User!
Guaranteed Success Pass Every Exam with Pass2Certify.
Save $15 instantly with promo code
SAVEFAST
Sales: [email protected]
Support: [email protected]
https://pass2certify.com//exam/156-215.81 Page 5 of 5