Official Bank 0/522

Check Point Certified Security Administrator R80 Exam (156-215.80) - Checkpoint Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
522 Total Questions
1
Question
You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base.

How do you achieve this?
Options
A Add a temporary rule using SmartDashboard and select hide rule.
B Use dbedit to script the addition of a rule directly into the Rule Bases_5_0.fws configuration file.
C Select Block intruder from the Tools menu in SmartView Tracker.
D Create a Suspicious Activity Rule in Smart Monitor.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which back up method uses the command line to create an image of the OS?
Options
A snapshot
B System backup
C Save Configuration
D Migrate
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which Identity Source(s) should be selected in Identity Awareness for when there is a requirement for a higher level of security for sensitive servers?
Options
A RADIUS and Account Logon
B AD Query
C Terminal Servers Endpoint Identity Agent
D Endpoint Identity Agent and Browser-Based Authentication
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following uses the same key to decrypt as it does to encrypt?
Options
A Symmetric encryption
B Asymmetric encryption
C Dynamic encryption
D Certificate-based encryption
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Which statement is TRUE of anti-spoofing?
Options
A With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change
B Anti-spoofing is not needed when IPS software blade is enabled
C It is more secure to create anti-spoofing groups manually
D It is BEST Practice to have anti-spoofing groups in sync with the routing table
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.