156-610 Sample Questions & Answers
Database migration and ElasticXL cluster rollout edge out the rest, split evenly between high-availability design, dynamic policy objects, site-to-site VPN setup, SmartEvent monitoring, and standard gateway upgrades.
Launch the full 156-610 simulator →Showing 8 of 17 free samples.
- Question 1Intermediate
Management High Availability · Failover
You are performing a manual promotion of a Secondary Management Server to Active status. After the promotion, you notice that the Security Gateways are still trying to fetch logs from the old Primary server. What step was likely missed?
Show answer & explanation
Correct answer: D
When the Active management server changes, a policy installation is required to update the Security Gateways with the new management server's details for logging and fetching updates.
- Question 2IntermediateSelect 2
Management High Availability · Prerequisites
In an R82 Management High Availability configuration, which TWO conditions must be met for a successful synchronization between peers? (Select TWO)
Show answer & explanation
Correct answers: D, E
Management HA requires identical software versions and hotfixes (build numbers) to synchronize the database correctly.
Time synchronization is critical for database consistency and SIC validation.
- Question 3Beginner
Management High Availability · Failover
True or False: In a Management High Availability environment, if the Active server fails, the Standby server automatically promotes itself to Active and installs the policy to all gateways immediately.
Show answer & explanation
Correct answer: B
False. While the Standby server may become Active (if configured for auto-failover), it does NOT automatically install policy to gateways. Policy installation is a manual action or requires a specific automated script.
- Question 4Intermediate
Advanced Policy Management · Dynamic Objects
A security administrator needs to create a policy rule that allows access to an external partner's web server which changes its IP address frequently (dynamic DNS). Which Check Point object type is BEST suited for this scenario in R82 to minimize policy installs?
Show answer & explanation
Correct answer: A
Domain Objects (FQDN) allow the gateway to resolve the IP address dynamically via DNS without requiring a policy re-installation when the IP changes.
- Question 5Beginner
Advanced Policy Management · Rulebase Logic
When troubleshooting a dropped connection in the R82 SmartConsole Rulebase, you observe that traffic is hitting the 'Cleanup Rule' instead of the intended 'Allow' rule. What is the most likely cause?
Show answer & explanation
Correct answer: B
Check Point policies are processed top-down. If the traffic matches the Cleanup Rule (usually 'Any' -> 'Any' -> 'Drop') before reaching the specific Allow rule, it implies the Allow rule is placed incorrectly below the Cleanup Rule.
- Question 6Advanced
Advanced Policy Management · NAT
You are configuring Manual NAT rules in R82. Which of the following statements correctly describes the priority of NAT rule processing?
Show answer & explanation
Correct answer: A
The NAT rulebase is divided into sections. Manual rules placed at the top are processed first, followed by Automatic rules (Static then Hide), and finally Manual rules placed at the bottom.
- Question 7Intermediate
Advanced Policy Management · Time Objects
An administrator wants to permit access to social media sites only during lunch hours (12:00 PM - 1:00 PM). How is this best achieved in the R82 Access Control Policy?
Show answer & explanation
Correct answer: B
Access Control rules have a dedicated 'Time' column where Time Objects can be applied to restrict when the rule is active.
- Question 8Intermediate
Advanced Policy Management · Layers
What is the primary benefit of using 'Inline Layers' in an R82 Access Control Policy?
Show answer & explanation
Correct answer: D
Inline Layers (or sub-policies) enable delegation of control, allowing specific administrators to manage parts of the rulebase without affecting the main policy, and improve rulebase organization.
Ready for the real thing?
The full 156-610 simulator has every exam-style question, timed mode, and instant scoring.