Practice Exam 156-215.82: CCSA R82

Question bank: 100 · timed mock exam: 90 min

Official exam page on the vendor's site (opens in a new tab) Official exam guide (opens in a new tab)

Compare: 156-215.82 vs Fortinet NSE 4 – FortiOS 7.6 Administrator

  • Introduction to Quantum Security 10 questions
  • Administrator Account Management 10 questions
  • Object Management 10 questions
  • Security Policy Management 10 questions
  • Policy Layers 10 questions
  • Security Operations Monitoring 10 questions
  • Identity Awareness 10 questions
  • HTTPS Inspection 10 questions
  • Application Control and URL Filtering 10 questions
  • Threat Prevention Fundamentals 10 questions
Study mode (free) Exam mode (subscribers)

Free: 25 questions in study mode, all domains, no account.

Subscription: the 100 questions of this certification, the timed exam mode, and all other certifications too.

Subscribe · €9.99 / month

Secure card payment (Stripe) · No commitment · Cancel online

How to prepare for CCSA R82 with InfraPrep

The 100 questions cover 10 domains: Introduction to Quantum Security, Administrator Account Management, Object Management, Security Policy Management, Policy Layers, Security Operations Monitoring, Identity Awareness, HTTPS Inspection, Application Control and URL Filtering, Threat Prevention Fundamentals. 25 of them are free, without an account.

Study mode

Answer at your pace: each answer is corrected straight away, with an explanation and the link to the documentation it relies on.

Exam mode

A timed exam of 90 minutes, with a question map to flag and come back to questions before you submit.

Results by domain

Your score is broken down by domain, so you know what to review first.

Original questions

Every question is written from the public documentation, never copied from the exam. You can contest an answer from study mode.

10 free sample questions

Question 1 Introduction to Quantum Security

In a standard three-tier Check Point deployment, an administrator edits Access Control rules and clicks Install Policy. Which component manages and stores the security policy and distributes it to the enforcement points?

  1. SmartConsole running on the administrator's workstation
  2. The Security Gateway placed at the network perimeter
  3. The Security Management Server
  4. A dedicated Log Server receiving gateway logs
Show the answer and the explanation

Correct answer: C

The Security Gateway guide describes the Security Management Server as the server that manages, stores, and distributes the security policy to gateways, clusters and security groups.

Source: official documentation

Question 2 Administrator Account Management

An automation team created an administrator account whose authentication method is API key, and their scripts work correctly with the management API. An engineer now tries to open SmartConsole with this same account and the login fails. What is the most likely explanation?

  1. The API key expired as soon as the first script used it
  2. An API key can run API commands but cannot authenticate SmartConsole
  3. API key accounts must first be assigned the Super User permission profile
  4. SmartConsole requires the API key to be imported into the CAPI store first
Show the answer and the explanation

Correct answer: B

The administrator accounts chapter states that an API key can only be used to execute API commands and not for SmartConsole authentication, so the failure is expected behavior.

Source: official documentation

Question 3 Object Management

A company often adds new internal subnets behind existing gateway interfaces. The security team wants these networks to be covered automatically by the existing rules, without editing the Rule Base each time. Which object type should the rules use in the Source and Destination columns?

  1. Address range objects covering each new subnet
  2. Wildcard objects built from the subnet numbering plan
  3. Updatable objects published in the Check Point cloud
  4. Security zone objects assigned to the gateway interfaces
Show the answer and the explanation

Correct answer: D

Security zones are assigned to gateway interfaces and used in the Source and Destination columns, which lets you add networks to gateway interfaces without changing the Rule Base.

Source: official documentation

Question 4 Security Policy Management

The R82 unified Access Control policy lets one rule combine several kinds of match criteria. Which of these is NOT configured in the Access Control Rule Base but in the Threat Prevention policy?

  1. Content Awareness data types
  2. Identity Awareness access roles
  3. IPS protections
  4. URL Filtering categories
Show the answer and the explanation

Correct answer: C

IPS is one of the software blades that provide threat prevention, so its protections belong to the Threat Prevention policy, not to the unified Access Control Rule Base.

Source: official documentation

Question 5 Policy Layers

In an ordered layer of the Access Control policy, an administrator looks at the parent rule of an inline layer. What is shown in the Action cell of that parent rule?

  1. Accept, followed by the list of sub-rules
  2. Drop, because the sub-rules decide what is accepted
  3. The name of the inline layer
  4. The name of the ordered layer that follows
Show the answer and the explanation

Correct answer: C

The guide states that the action of the parent rule is the name of the inline layer.

Source: official documentation

Question 6 Security Operations Monitoring

A small company has one Security Management Server and two Security Gateways, with no dedicated Log Server and no local logging configured. Where are the network logs of the gateways stored by default?

  1. On the Security Management Server
  2. On each Security Gateway, in its local log directory
  3. On the SmartConsole client that is connected
  4. On the SmartEvent correlation unit
Show the answer and the explanation

Correct answer: A

The Logging guide states that the default log storage is the management server that receives logs from the managed gateways.

Source: official documentation

Question 7 Identity Awareness

A company wants only members of the Finance group to reach the financial reporting server, whether they work from the office or remotely, and it wants logs that show user names rather than only IP addresses. What does Identity Awareness add to the gateway to meet this need?

  1. It replaces IP addresses with user names inside the packets
  2. It maps user and computer identities to IP addresses
  3. It forces every user to authenticate through SecurID tokens
  4. It translates user addresses with NAT to a per-group pool
Show the answer and the explanation

Correct answer: B

Identity Awareness closes the gap of IP-only firewalls by mapping user and computer identities to IP addresses, which allows user-based rules and logs.

Source: official documentation

Question 8 HTTPS Inspection

A company hosts its customer web portal on a server in the DMZ. The security team wants IPS and the other enabled blades to inspect the encrypted requests that customers send to this portal from the Internet. Which HTTPS Inspection mode addresses this need?

  1. Outbound HTTPS Inspection
  2. Inbound HTTPS Inspection
  3. HTTPS Inspection bypass for the DMZ
  4. Categorization mode with SNI only
Show the answer and the explanation

Correct answer: B

Inbound HTTPS Inspection protects internal servers from malicious requests that arrive from the Internet or an external network.

Source: official documentation

Question 9 Application Control and URL Filtering

An administrator plans one rule that drops both the Gambling URL category and a specific peer-to-peer application for all internal users. What does Check Point recommend for this design?

  1. Put the application and the URL category in separate rules
  2. Keep one rule but set its action to Ask with a UserCheck message
  3. Move the rule to the Threat Prevention policy as an IPS exception
  4. Keep one rule and place it above the stealth rule of the policy
Show the answer and the explanation

Correct answer: A

Check Point recommends not to use Application Control and URL Filtering in the same rule, because this may lead to wrong rule matching; they should be in separate rules.

Source: official documentation

Question 10 Threat Prevention Fundamentals

Employees complain that downloaded office documents arrive late because they wait for sandbox analysis. Management wants users to receive a safe, usable version of each file immediately, while the original file is still inspected. Which Threat Prevention capability addresses this?

  1. Anti-Bot, which blocks command and control communications
  2. IPS, which detects and prevents known exploits in protocols
  3. Threat Extraction, which delivers sanitized content to users
  4. Anti-Virus, which blocks known malware at the gateway
Show the answer and the explanation

Correct answer: C

Threat Extraction removes exploitable content, reconstructs files and promptly delivers sanitized content to maintain business flow, creating a safe copy while the original file is inspected.

Source: official documentation

Frequently asked questions

Are there free questions, and do I need an account?

Yes. 25 questions of this certification are free in study mode, across all its domains, without a subscription and without registration. The account is created when you subscribe, at checkout.

How does the subscription work, and can I cancel?

One monthly subscription covers all certifications and the timed practice exams. There is no minimum period. You cancel online, at any time, with the "Cancel your contract" function in My account; cancellation takes effect at the end of the month already paid, and no further payment is taken.

Where do the questions come from?

Every question is original, written from the vendor's public documentation. Each answer comes with an explanation and a link to the documentation page it relies on. InfraPrep is not affiliated with the vendors, and certification names belong to their owners.

In which language are the questions?

The questions are written in English, also on the French version of the site.

Is the catalog updated?

Yes, the catalog changes over time: new certifications and new questions are added.