156-215.81 Exam Questions and Answers

QUESTION: 46

What is the best sync method in the ClusterXL deployment?

Use 1 cluster + 1st sync
Use 1 dedicated sync interface
Use 3 clusters + 1st sync + 2nd sync + 3rd sync
Use 2 clusters + 1st sync + 2nd sync

Answer(s): B

Explanation:

The best sync method in the ClusterXL deployment is to use one dedicated sync interface56. This method provides optimal performance and reliability for synchronization traffic. Using multiple sync interfaces is not recommended as it increases CPU load and does not provide 100% sync redundancy5. Using multiple clusters is not a sync method, but a cluster topology.

Reference:

Sync Redundancy in ClusterXL, Best Practice for HA sync interface

Reveal Solution Next Question

QUESTION: 47

Can multiple administrators connect to a Security Management Server at the same time?

No, only one can be connected
Yes, all administrators can modify a network object at the same time
Yes, every administrator has their own username, and works in a session that is independent of other administrators
Yes, but only one has the right to write

Answer(s): C

Explanation:

Multiple administrators can connect to a Security Management Server at the same time, and each administrator has their own username and works in a session that is independent of other administrators1. This allows concurrent administration and prevents conflicts between different administrators. The other options are incorrect. Only one administrator can be connected is false. All administrators can modify a network object at the same time is false, as only one administrator can lock and edit an object at a time. Only one has the right to write is false, as all administrators have write permissions unless they are restricted by roles or permissions.

Reference:

Security Management Server - Check Point Software

Reveal Solution Next Question

QUESTION: 48

What Identity Agent allows packet tagging and computer authentication?

Endpoint Security Client
Full Agent
Light Agent
System Agent

Answer(s): B

Explanation:

The Full Identity Agent allows packet tagging and computer authentication2. Packet tagging is a feature that enables the Security Gateway to identify the source user and machine of each packet, regardless of NAT or routing. Computer authentication is a feature that enables the Security Gateway to authenticate machines that are not associated with any user, such as servers or unattended workstations. The other options are incorrect. Endpoint Security Client is not an Identity Agent, but a software that provides endpoint security features such as firewall, antivirus, VPN, etc. Light Agent is an Identity Agent that does not require installation and runs on a web browser, but it does not support packet tagging or computer authentication. System Agent is not an Identity Agent, but a software that provides system information and health monitoring for endpoints.

Reference:

Check Point Identity Agent for Microsoft Windows 10

Reveal Solution Next Question

QUESTION: 49

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log.
Which of the following options can you add to each Log, Detailed Log and Extended Log?

Accounting
Suppression
Accounting/Suppression
Accounting/Extended

Answer(s): C

Explanation:

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. You can add Accounting and/or Suppression to each of these options1. Accounting enables you to track the amount of data that is sent or received by a specific rule. Suppression enables you to reduce the number of logs that are generated by a specific rule. Therefore, the correct answer is C. Accounting/Suppression.

Reference:

Logging and Monitoring Administration Guide R80 - Check Point Software

Reveal Solution Next Question

QUESTION: 50

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

fw ctl multik dynamic_dispatching on
fw ctl multik dynamic_dispatching set_mode 9
fw ctl multik set_mode 9
fw ctl miltik pq enable

Answer(s): C

Explanation:

To optimize drops, you can use Priority Queues and fully enable Dynamic Dispatcher on the Security Gateway23. Priority Queues are a mechanism that prioritizes part of the traffic when the Security Gateway is stressed and needs to drop packets. Dynamic Dispatcher is a feature that dynamically assigns new connections to a CoreXL FW instance based on the utilization of CPU cores. To enable both features, you need to run the command fw ctl multik set_mode 9 on the Security Gateway4. Therefore, the correct answer is C. fw ctl multik set_mode 9.

Reference:

CoreXL Dynamic Dispatcher - Check Point Software, Firewall Priority Queues in R80.x / R81.x - Check Point Software, Separate

Config for Dynamic Dispatcher and Priority Queues

Reveal Solution Next Question

Checkpoint 156-215.81 Exam (page: 10) Checkpoint Check Point Certified Security Administrator R81 Updated on: 15-Feb-2026

QUESTION: 46

Explanation:

Reference:

QUESTION: 47

Explanation:

Reference:

QUESTION: 48

Explanation:

Reference:

QUESTION: 49

Explanation:

Reference:

QUESTION: 50

Explanation:

Reference:

Checkpoint 156-215.81 Exam (page: 10)
Checkpoint Check Point Certified Security Administrator R81
Updated on: 15-Feb-2026