Free 156-215.77 Questions for CheckPoint Check Point Certified Security Administrator 156-215.77 Exam as PDF & Practice Test Engine

Exam Code/Number: 156-215.77
Exam Name/Title: Check Point Certified Security Administrator
Certification Provider: CheckPoint
Corresponding Certification: CheckPoint Certification

Exam Questions: 390
Updated On: Jun 16, 2026

Question #1

You are MegaCorp's Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together?
Give the BEST answer.

A. The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

B. The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

C. The rule position depends on the time of their creation. The rules created first are placed at the top; rules created later are placed successively below the others.

D. The Administrator decides the rule order by shifting the corresponding rules up and down.

Discussion 0

Correct Answer: A Vote an answer

Question #2

If a Security Gateway enforces three protections, LDAP Injection, Malicious Code Protector, and Header Rejection, which Check Point license is required in SmartUpdate?

A. IPS

B. SSL: VPN

C. SmartEvent Intro

D. Data Loss Prevention

Discussion 0

Correct Answer: A Vote an answer

Question #3

Match the terms with their definitions:
Exhibit:

A. A-3, B-2, C-4, D-1

B. A-3, B-2, C-1, D-4

C. A-3, B-4, C-1, D-2

D. A-2, B-3, C-4, D-1

Discussion 0

Correct Answer: A Vote an answer

Question #4

Which command line interface utility allows the administrator to verify the Security Policy name and timestamp currently installed on a firewall module?

A. cpstat fwd

B. fw ctl pstat

C. fw stat

D. fw ver

Discussion 0

Correct Answer: C Vote an answer

Question #5

Which tool CANNOT be launched from SmartUpdate R77?

A. IP Appliance Voyager

B. snapshot

C. cpinfo

D. GAiA WebUI

Discussion 0

Correct Answer: B Vote an answer

Question #6

Which command displays the installed Security Gateway kernel version?

A. fw printver

B. cpstat -gw

C. fw ver -k

D. fw ver

Discussion 0

Correct Answer: C Vote an answer

Question #7

Where does the security administrator activate Identity Awareness within SmartDashboard?

A. Gateway Object > General Properties

B. LDAP Server Object > General Properties

C. Policy > Global Properties > Identity Awareness

D. Security Management Server > Identity Awareness

Discussion 0

Correct Answer: A Vote an answer

Question #8

Your Security Management Server fails and does not reboot. One of your remote Security Gateways managed by the Security Management Server reboots.
What occurs with the remote Gateway after reboot?

A. Since the Security Management Server is not available, the remote Gateway uses the local Security Policy, but does not log traffic.

B. Since the Security Management Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, all traffic is allowed through the Gateway.

C. The remote Gateway fetches the last installed Security Policy locally and passes traffic normally. The Gateway will log locally, since the Security Management Server is not available.

D. Since the Security Management Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, no traffic is allowed through the Gateway.

Discussion 0

Correct Answer: C Vote an answer

Question #9

In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB?

A. Use the command fwm logexport to export the old log files to another location.

B. Configure a script to run fw logswitch and SCP the output file to a separate file server.

C. Do nothing. The Security Management Server automatically copies old logs to a backup server before purging.

D. Do nothing. Old logs are deleted, until free space is restored.

Discussion 0

Correct Answer: B Vote an answer

Question #10

Which rule is responsible for the installation failure?
Exhibit:

A. Rule 3

B. Rule 6

C. Rule 5

D. Rule 4

Discussion 0

Correct Answer: D Vote an answer

Question #11

Which rules are not applied on a first-match basis?

A. Session Authentication

B. User Authentication

C. Client Authentication

D. Cleanup

Discussion 0

Correct Answer: B Vote an answer

Question #12

Katie has been asked to setup a rule to allow the new webserver in the DMZ to be accessible from the internet on port 443. The IP address of the Web Server, Apothos, is
192.168.126.3 and the external address should be 10.4.2.3. This needs to be the only server associated with this External IP address.
Which answer below will accomplish the steps needed to complete this task?

A. Katie will create a host node object with an IP address of 192.168.126.3 and will configure a static NAT of 10.4.2.3. She will add a new rule in the DMZ section of the policy for the Apothos server. The rule will have an "Any Source, Destination of Apothos Host Object and service of HTTPS".

B. Katie will create a host node object with an IP address of 192.168.126.3 and will configure a static NAT of 10.4.2.3. She will add a new rule in the DMZ section of the policy for the Apothos server. The rule will have an "Apothos Host Object Source, Destination of Any andservice of HTTPS".

C. Katie will create a Network object with an IP address of 192.168.126.3 and will configure a Hide NAT of 10.4.2.3. She will add a new rule in the DMZ section of the policy for the Apothos server. The rule will have an "Any Source, Destination of Apothos Host Object and service of HTTPS".

D. Katie will create a host node object with an IP address of 10.4.2.3 and will configure a static NAT of 192.168.126.3. She will add a new rule in the DMZ section of the policy for the Apothos server. The rule will have an "Any Source, Destination of Apothos Host Object andservice of HTTPS".

Discussion 0

Correct Answer: D Vote an answer

Question #13

What is the syntax for uninstalling a package using newpkg?

A. -S <pathname of package>

B. -u <pathname of package>

C. newpkg CANNOT be used to uninstall a package

D. -i <full pathname of package>

Discussion 0

Correct Answer: C Vote an answer

Free 156-215.77 Questions for CheckPoint Check Point Certified Security Administrator 156-215.77 Exam as PDF & Practice Test Engine

Download Free CheckPoint 156-215.77 Demo