Free 156-315.81 Practice Test Questions 2026

R81.20 management server can manage gateways with which versions installed?

A. Versions R77 and higher

B. Versions R76 and higher

C. Versions R75.20 and higher

D. Versions R75 and higher

With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

A. Threat Cloud Intelligence

B. Threat Prevention Software Blade Package

C. Endpoint Total Protection

D. Traffic on port 25

You notice that your firewall is under a DDoS attack and would like to enable the Penalty Box feature, which command you use?

A. sim erdos –e 1

B. sim erdos – m 1

C. sim erdos –v 1

D. sim erdos –x 1

How many layers make up the TCP/IP model?

A. 2

B. 7

C. 6

D. 4

Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R81.20. Company’s Developer Team is having random access issue to newly deployed Application Server in DMZ’s Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela’s desk for an investigation. Pamela decides to use Check Point’s Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.
What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

A. Pamela should check SecureXL status on DMZ Security gateway and if it’s turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.

B. Pamela should check SecureXL status on DMZ Security Gateway and if it’s turned OFF. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.

C. Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.

D. Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.

NO: 219
What cloud-based SandBlast Mobile application is used to register new devices and users?

A. Check Point Protect Application

B. Management Dashboard

C. Behavior Risk Engine

D. Check Point Gateway

Which path below is available only when CoreXL is enabled?

A. Slow path

B. Firewall path

C. Medium path

D. Accelerated path

What is the Implicit Clean-up Rule?

A. A setting is defined in the Global Properties for all policies.

B. A setting that is configured per Policy Layer.

C. Another name for the Clean-up Rule.

D. Automatically created when the Clean-up Rule is defined.

What command lists all interfaces using Multi-Queue?

A. cpmq get

B. show interface all

C. cpmq set

D. show multiqueue all

What is UserCheck?

A. Messaging tool used to verify a user’s credentials.

B. Communication tool used to inform a user about a website or application they are trying to access.

C. Administrator tool used to monitor users on their network.

D. Communication tool used to notify an administrator when a new user is created.

The SmartEvent R81 Web application for real-time event monitoring is called:

A. SmartView Monitor

B. SmartEventWeb

C. There is no Web application for SmartEvent

D. SmartView

Which file gives you a list of all security servers in use, including port number?

A. $FWDIR/conf/conf.conf

B. $FWDIR/conf/servers.conf

C. $FWDIR/conf/fwauthd.conf

D. $FWDIR/conf/serversd.conf