156-215.81 Exam Questions and Answers

QUESTION: 56

Fill in the blank: An LDAP server holds one or more ______________.

Server Units
Administrator Units
Account Units
Account Servers

Answer(s): C

Explanation:

An LDAP server holds one or more Account Units. An Account Unit is a logical representation of an LDAP server in the Check Point database. It defines the connection parameters, authentication methods, and user and group information that are retrieved from the LDAP server. An Account Unit allows the Security Gateway to use the LDAP server for user authentication and identity awareness.

The other options are incorrect. A Server Unit is a logical representation of a Check Point server in the Check Point database. An Administrator Unit is a logical representation of an administrator or an administrator group in the Check Point database. An Account Server is not a valid term in Check Point terminology.

Reference:

[Check Point R81 Identity Awareness Administration Guide], [Check Point R81 Security Management Administration Guide], [Check Point R81 SmartConsole R81 Resolved Issues]

Reveal Solution Next Question

QUESTION: 57

Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

AES-128
AES-256
DES
3DES

Answer(s): A

Explanation:

In Security Gateways R75 and above, SIC uses AES-128 for encryption. SIC stands for Secure Internal Communication, which is a mechanism that establishes trust between Check Point components, such as Security Gateways, Security Management Servers, Log Servers, etc. SIC uses certificates to authenticate and encrypt the communication between the components. AES-128 is an encryption algorithm that uses a 128-bit key to encrypt and decrypt data. The other options are incorrect. AES- 256 is an encryption algorithm that uses a 256-bit key, but it is not used by SIC. DES and 3DES are older encryption algorithms that use 56-bit and 168-bit keys respectively, but they are not used by SIC either.

Reference:

[Secure Internal Communication (SIC) between Check Point components], AES
- Wikipedia, DES - Wikipedia, Triple DES - Wikipedia

Reveal Solution Next Question

QUESTION: 58

What protocol is specifically used for clustered environments?

Clustered Protocol
Synchronized Cluster Protocol
Control Cluster Protocol
Cluster Control Protocol

Answer(s): D

Explanation:

The protocol that is specifically used for clustered environments is Cluster Control Protocol (CCP). CCP is a proprietary Check Point protocol that is used for communication between cluster members and for cluster administration. CCP enables cluster members to exchange state information, synchronize connections, monitor interfaces, and perform failover operations. The other options are incorrect. Clustered Protocol, Synchronized Cluster Protocol, and Control Cluster Protocol are not valid terms in Check Point terminology.

Reference:

[Cluster Control Protocol (CCP) - Check Point Software]

Reveal Solution Next Question

QUESTION: 59

Which of the following is NOT a tracking option? (Select three)

Partial log
Log
Network log
Full log

Answer(s): A,C,D

Explanation:

The options that are not tracking options are Partial log, Network log, and Full log. Tracking options are settings that determine how the Security Gateway handles traffic that matches a rule in the security policy. The valid tracking options are Log, Detailed Log, Extended Log, Alert, Mail, SNMP trap, User Defined Alert, and None. The other options are incorrect. Log is a tracking option that records basic information about the traffic, such as source, destination, service, action, etc. Detailed Log is a tracking option that records additional information about the traffic, such as NAT details, data amount, etc. Extended Log is a tracking option that records even more information about the traffic, such as matched IPS protections, application details, etc.

Reference:

[Logging and Monitoring Administration Guide R80 - Check Point Software]

Reveal Solution Next Question

QUESTION: 60

Which command shows the installed licenses?

cplic print
print cplic
fwlic print
show licenses

Answer(s): A

Explanation:

The command that shows the installed licenses is cplic print. This command displays the license information on a Check Point server or Security Gateway. It shows the license type, expiration date, attached blades, etc. The other options are incorrect. print cplic is not a valid command. fwlic print is not a valid command. show licenses is not a valid command.

Reference:

[How to check license status on SecurePlatform / Gaia from CLI]

Reveal Solution Next Question

Checkpoint 156-215.81 Exam (page: 12) Checkpoint Check Point Certified Security Administrator R81 Updated on: 15-Feb-2026

QUESTION: 56

Explanation:

Reference:

QUESTION: 57

Explanation:

Reference:

QUESTION: 58

Explanation:

Reference:

QUESTION: 59

Explanation:

Reference:

QUESTION: 60

Explanation:

Reference:

Checkpoint 156-215.81 Exam (page: 12)
Checkpoint Check Point Certified Security Administrator R81
Updated on: 15-Feb-2026