Free CheckPoint 156-315.81.20 Practice Test & Real Exam Questions

Exam Code/Number: 156-315.81.20
Exam Name/Title: Check Point Certified Security Expert - R81.20
Certification Provider: CheckPoint
Corresponding Certification: CCSE

Exam Questions: 615
Updated On: Oct 03, 2026

Question #1

What is the benefit of Manual NAT over Automatic NAT?

A. There is no benefit since Automatic NAT has in any case higher priority over Manual NAT

B. If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy.

C. On IPSO and GAIA Gateways, it is handled in a stateful manner

D. You have the full control about the priority of the NAT rules

Discussion 0

Correct Answer: D Vote an answer

Question #2

Which firewall daemon is responsible for the FW CLI commands?

A. fwm

B. cpd

C. cpm

D. fwd

Discussion 0

Correct Answer: D Vote an answer

Question #3

How to can you make sure that the old logs will be available after updating the Management to version R81.20 using the Advanced Upgrade Method?

A. Use the WebUI -> Maintenance > System Backup and store the backup on a remote FTP server

B. The logs will be included running SFWDIR/scripts/migrate_server export -v R81.20 <path/filename>

C. Use the WebUI to save a snapshot before updating the Management -> Maintenance > Snapshot Management

D. Use the migrate_server tool with the option '-I' for the logs and '-x' for the index

Discussion 0

Correct Answer: B Vote an answer

Question #4

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

A. Security Gateway

B. SmartConsole

C. SmartEvent

D. None, Security Management Server would be installed by itself.

E. SecureClient

Discussion 0

Correct Answer: A Vote an answer

Question #5

Which file contains the host address to be published, the MAC address that needs to be associated with the IP Address, and the unique IP of the interface that responds to ARP request?

A. $CPDIR/conf/local.arp

B. $FWDIR/conf/local.arp

C. /var/opt/CPshrd-R81/conf/local.arp

D. /opt/CPshrd-R81/conf/local.arp

Discussion 0

Correct Answer: B Vote an answer

Question #6

What is the command to see cluster status in cli expert mode?

A. fw ctl stat

B. clusterXL status

C. cphaprob stat

D. clusterXL stat

Discussion 0

Correct Answer: C Vote an answer

Question #7

CPM process stores objects, policies, users, administrators, licenses and management data in a database. The database is:

A. Postgres SQL

B. MarisDB

C. SOLR

D. MySQL

Discussion 0

Correct Answer: A Vote an answer

Question #8

What is the Implicit Clean-up Rule?

A. Another name for the Clean-up Rule.

B. A setting that is configured per Policy Layer.

C. Automatically created when the Clean-up Rule is defined.

D. A setting is defined in the Global Properties for all policies.

Discussion 0

Correct Answer: A Vote an answer

Question #9

Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

A. Super User

B. Auditor

C. Read Only All

D. Full Access

Discussion 0

Correct Answer: C Vote an answer

Question #10

What is the command to check the status of the SmartEvent Correlation Unit?

A. fw ctl stat cpsemd

B. fw ctl get int cpsead_stat

C. cpstat cpsead

D. cp_conf get_stat cpsemd

Discussion 0

Correct Answer: C Vote an answer

Question #11

Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

A. All Connections (Clear or Encrypted)

B. Accept all encrypted traffic

C. All Site-to-Site VPN Communities

D. Specific VPN Communities

Discussion 0

Correct Answer: D Vote an answer

Question #12

Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment.
Which details she need to fill in System Restore window before she can click OK button and test the backup?

A. Server, SCP, Username, Password, Path, Comment, Member

B. Server, TFTP, Username, Password, Path, Comment, All Members

C. Server, Protocol, username Password, Path, Comment, Member

D. Server, Protocol, Username, Password, Path, Comment, All Members

Discussion 0

Correct Answer: D Vote an answer

Question #13

Which one of the following is true about Threat Extraction?

A. Delivers file only if no threats found

B. Can take up to 3 minutes to complete

C. Works on all MS Office, Executables, and PDF files

D. Always delivers a file to user

Discussion 0

Correct Answer: D Vote an answer

Question #14

In what way are SSL VPN and IPSec VPN different?

A. SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless

B. SSL VPN adds an extra VPN header to the packet, IPSec VPN does not

C. IPSec VPN does not support two factor authentication, SSL VPN does support this

D. IPSec VPN uses an additional virtual adapter; SSL VPN uses the client network adapter only.

Discussion 0

Correct Answer: D Vote an answer

Download Free CheckPoint 156-315.81.20 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-315.81.20 exam.