156-521 Sample Questions & Answers
Management API commands take up the largest portion, alongside Gaia API operations, the infrastructure needed to prepare for API work, automation and orchestration fundamentals, API best practices, parsing JSON with jq, and calling the web API from Postman.
Launch the full 156-521 simulator →Showing 10 of 20 free samples.
- Question 1Intermediate
Check Point API Infrastructure · API Infrastructure Components
A Check Point administrator notices that the Management API is unresponsive. Upon investigation, they determine the API server process is down. Which command should be used to verify the current status of the API server process?
Show answer & explanation
Correct answer: B
The
api statuscommand provides a specific status report for the API server, including whether it is started, initializing, or stopped.cpwd_admin listshows all watchdog processes butapi statusis the dedicated tool for API health. - Question 2Intermediate
Check Point API Infrastructure · Environment Preparation
To prevent unauthorized API access from unknown sources, an administrator wants to restrict API connections to a specific subnet. Which command or configuration step achieves this on the Security Management Server?
Show answer & explanation
Correct answer: C
The
mgmt_cli set api-settingscommand (or the GUI equivalent in SmartConsole > Manage & Settings > Blades > Management API) is used to configure which IP addresses are allowed to send API requests. - Question 3Advanced
Check Point API Infrastructure · Security best practices
An automation engineer is writing a Python script to communicate with the Management API. To ensure the script is not vulnerable to Man-in-the-Middle (MITM) attacks during the initial connection, what validation step must be performed?
Show answer & explanation
Correct answer: C
When connecting to the API server, especially for the first time or from a new client, validating the server's SSL fingerprint is critical to ensure you are connecting to the legitimate Management Server and not an imposter.
- Question 4Advanced
Check Point API Infrastructure · Environment Preparation
You are troubleshooting a production Management Server where API commands are failing with 'Out of Memory' errors due to heavy automation load. Which configuration change is recommended to resolve this?
Show answer & explanation
Correct answer: A
The API server runs as a Java process. Heavy API usage can exhaust the default heap size. Increasing the heap size (via
api reconfigureor modifying the config file) allows the API server to handle more concurrent requests and larger payloads. - Question 5Intermediate
Check Point API Infrastructure · API architecture
Which system component acts as the intermediary between the API client (such as a Python script) and the Check Point Management database (PostgreSQL/SOLR)?
Show answer & explanation
Correct answer: C
The CPM process is the core management logic container in R80/R81 architecture. The API server communicates with CPM, which then interacts with the database. FWM is legacy (though still present for some functions), but CPM handles the main object management.
- Question 6Beginner
Check Point API Infrastructure · Environment Preparation
An administrator needs to restart the API server to apply a configuration change without rebooting the entire Management Server. Which command should be used?
Show answer & explanation
Correct answer: C
The
api restartcommand specifically restarts the API server subsystem. This is faster and less disruptive than restarting all Check Point services withcpstop/cpstart. - Question 7Intermediate
Check Point API Infrastructure · Environment Preparation
A DevOps engineer is configuring a new Management Server and needs to ensure that the API server automatically starts upon system boot. Which command validates this configuration?
Show answer & explanation
Correct answer: C
The
api statuscommand output includes a line indicating 'Automatic Start: Enabled' (or Disabled). This confirms whether the API service is configured to launch on boot. - Question 8Beginner
Management API · Object and Policy Automation
When using
mgmt_clito add a new host object, which parameter is mandatory to successfully create the object?Show answer & explanation
Correct answer: B
The
nameparameter is mandatory for creating almost any object in Check Point. Whileip-addressis commonly used for hosts, creating a host without an IP (empty host) is possible in some versions, but a name is always required. - Question 9Intermediate
Management API · Management API Workflow and Tools
A developer is writing a script to add 100 rules to a policy package. After the script runs, the changes are visible in the session but not to other administrators. What step was missed?
Show answer & explanation
Correct answer: C
In Check Point's management model, changes made during a session are private until they are 'published'. The
publishcommand commits the changes to the database, making them visible to others and ready for installation. - Question 10Intermediate
Management API · Object and Policy Automation
You need to add a new access rule to the 'Network' layer of the 'Standard' policy package. Which command syntax is correct?
Show answer & explanation
Correct answer: B
Rules are added to a specific Layer, not directly to a Package (since R80). You must specify the
layerparameter. The layer name is often 'PackageName Network' (e.g., 'Standard Network').
Ready for the real thing?
The full 156-521 simulator has every exam-style question, timed mode, and instant scoring.