156-215.80 Exam Questions and Answers

QUESTION: 21

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret, the administrator found that the check box to enable pre-shared secret is shared and cannot be enabled. Why does it not allow him to specify the pre- shared secret?

IPsec VPN blade should be enabled on both Security Gateway.
Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.
Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.
The Security Gateways are pre-R75.40.

Answer(s): C

Reveal Solution Next Question

QUESTION: 22

You are the senior Firewall administrator for Alpha Corp, and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house overview of the new features of Check Point R80 Management to the other administrators in Alpha Corp. How will you describe the new “Publish” button in R80 Management Console?

The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database.
The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80
The Publish button saves any changes an administrator has made in their management session. After saving to the database, any changes are now visible to all other administrator sessions.
The Publish button saves any changes an administrator has made in their management session. After saving to the database, any changes are now visible to any new Unified Policy sessions.

Answer(s): C

Explanation:

To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created.

Reference:

https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

Reveal Solution Next Question

QUESTION: 23

Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

High Availability
Load Sharing Multicast
Load Sharing Pivot
Master/Backup

Answer(s): B

Explanation:

ClusterXL uses the Multicast mechanism to associate the virtual cluster IP addresses with all cluster members. By binding these IP addresses to a Multicast MAC address, it ensures that all packets sent to the cluster, acting as a gateway, will reach all members in the cluster.

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

Reveal Solution Next Question

QUESTION: 24

With the User Directory Software Blade, you can create R80 user definitions on a(an) ________Server.

NT domain
SMTP
LDAP
SecurID

Answer(s): C

Reference:

https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

Reveal Solution Next Question

QUESTION: 25

Which of the following is NOT a component of a Distinguished Name?

Organizational Unit
Country
Common Name
User container

Answer(s): D

Explanation:

Distinguished Name Components
CN=common name, OU=organizational unit, O=organization, L=locality, ST=state or province, C=country name

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/71950

Reveal Solution Next Question

Checkpoint 156-215.80 Exam (page: 5) Checkpoint Check Point Certified Security Administrator (CCSA R80) Updated on: 25-Dec-2025

QUESTION: 21

QUESTION: 22

Explanation:

Reference:

QUESTION: 23

Explanation:

Reference:

QUESTION: 24

Reference:

QUESTION: 25

Explanation:

Reference:

Checkpoint 156-215.80 Exam (page: 5)
Checkpoint Check Point Certified Security Administrator (CCSA R80)
Updated on: 25-Dec-2025