156-215.81.20 Identity Awareness — All Questions With Answers

Question 1hardmulti select

Read the full Identity Awareness explanation →

Which TWO of the following statements accurately describe the functionality of the Identity Awareness 'Identity Collector'?

Question 2hardmulti select

Read the full Identity Awareness explanation →

Which THREE of the following are valid Identity Awareness 'Identity Sources' that can be used to identify users?

Question 3mediummultiple choice

Read the full Identity Awareness explanation →

An administrator notices that some users are identified correctly while others show as 'unknown'. What is the most likely reason for this discrepancy in an Identity Awareness environment using AD Query?

Question 4hardmultiple choice

Read the full Identity Awareness explanation →

Refer to the exhibit. An administrator receives this error on a client machine. Which configuration error on the gateway is the most likely cause?

Exhibit

Error: 'Identity Agent failed to connect to the gateway. Please check the gateway's Identity Awareness configuration.'

Question 5hardmulti select

Read the full Identity Awareness explanation →

When designing an Identity Awareness deployment utilizing Terminal Servers, an administrator must select the appropriate tracking mechanisms to ensure accurate user identification. Which TWO mechanisms are natively supported by Check Point Identity Awareness for Terminal Server environments? (Choose two)

Question 6hardmulti select

Review the full subnetting walkthrough →

An administrator notices that Active Directory Query is failing to resolve user identities for a newly established subnet of workstations. The Security Gateway and Domain Controllers can communicate via ICMP, but queries fail. Which TWO troubleshooting steps should the administrator perform to resolve this issue? (Choose two)

Question 7mediummultiple choice

Read the full Identity Awareness explanation →

Which Identity Awareness method is best suited for an environment where users utilize non-domain joined devices and require seamless authentication without client software?

Question 8mediummultiple choice

Review the full subnetting walkthrough →

An administrator notices that Identity Awareness is not correctly identifying users from a specific subnet. The gateway is configured with AD Query. Which log source should the administrator check to verify the gateway is receiving successful login events?

Question 9mediummulti select

Read the full Identity Awareness explanation →

Which TWO of the following are prerequisites for configuring Identity Awareness with AD Query?

Question 10mediummulti select

Read the full Identity Awareness explanation →

Which THREE of the following are valid Identity Awareness sources for identifying users?

Question 11mediummultiple choice

Read the full Identity Awareness explanation →

Which object type should an administrator use in a Firewall rule to restrict access based on Active Directory group membership?

Question 12hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator has deployed a single Security Gateway running R81.20 with Identity Awareness configured to use the Terminal Server Agent method. Users authenticate to a Citrix XenApp terminal server, which then reports their identities to the Gateway. After several weeks in production, the administrator notices that user-to-IP mappings remain valid long after users disconnect, causing stale identities to be matched against firewall rules. The administrator verifies that the Terminal Server Agent is running and heartbeating normally, and that the Gateway is receiving updates. What is the MOST likely cause of the stale identity mappings?

Question 13mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator manages a Check Point R81.20 Security Gateway that enforces identity-based rules for users in an Active Directory domain. The organization wants to avoid installing any software on user computers and does not want to deploy a separate Identity Collector. Which Identity Awareness method should the administrator configure on the Security Gateway?

Question 14mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator manages a Check Point R81.20 Security Gateway that enforces identity-based rules for users authenticating through a Captive Portal. Users complain that they must log in every morning even though the portal shows a session timeout of 480 minutes. After reviewing the gateway configuration, the administrator notices that the Identity Awareness blade is set to use the 'AD Query' method only. Which action should the administrator take to resolve the frequent re-authentication?

Question 15mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator manages a Security Gateway where Identity Awareness is configured with both AD Query and Identity Agents (Captive Portal). Users who log into their domain-joined laptops via AD Query are also prompted by the Captive Portal, causing duplicate identity records and confusing session logs. Which action resolves this without disabling either acquisition method entirely?

Question 16easymultiple choice

Read the full Identity Awareness explanation →

A security administrator is deploying Identity Awareness on a Check Point R81.20 Security Gateway. The organization wants to identify users without installing any software on the user computers and without requiring the gateway to be a domain member. Which Identity Awareness method should the administrator use?

Question 17hardmulti select

Read the full Identity Awareness explanation →

An administrator is deploying Identity Awareness in a Check Point R81.20 environment. The company uses both domain-joined Windows workstations and non-domain-joined Linux servers. The administrator wants to ensure that users on both types of systems are identified. Which two methods should be configured to meet this requirement? (Choose two.)

Question 18mediummultiple choice

Read the full DHCP explanation →

A security administrator manages a Check Point R81.20 Security Gateway that protects a network where users authenticate through a Captive Portal. The administrator wants to prevent users from having to log in again every time their IP address changes due to DHCP lease renewal. Which Identity Awareness configuration should be implemented?

Question 19easymultiple choice

Read the full Identity Awareness explanation →

A security administrator has configured Identity Awareness on a Security Gateway using AD Query. Users report that after changing their passwords, they are still identified as the old user in the logs. The administrator verifies that the gateway can reach the domain controllers. What is the most likely cause of this issue?

Question 20easymultiple choice

Read the full Identity Awareness explanation →

A security administrator needs to configure Identity Awareness on a Check Point R81.20 Security Gateway so that users are identified by reading security event logs from domain controllers. Which Identity Awareness method should be selected?

Question 21hardmulti select

Read the full Identity Awareness explanation →

An administrator is troubleshooting Identity Awareness on an R81.20 Security Gateway. Users are intermittently identified as 'unknown' even though AD Query is configured and the service account is valid. The administrator suspects that the issue is related to the way identities are shared with other gateways. Which two statements about Identity Awareness identity sharing are correct? (Choose two.)

Question 22hardmultiple choice

Review the full subnetting walkthrough →

A security administrator is troubleshooting an Identity Awareness deployment that uses Identity Collector. Users on a specific subnet are intermittently identified as 'unknown' in the logs, while users on other subnets are consistently identified. The Identity Collector service is running and has a valid connection to the Security Gateway. What is the most likely cause of this intermittent identification failure?

Question 23mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator has configured Identity Awareness using Active Directory Query on a Check Point R81.20 Security Gateway. Users report that after changing their password, they are unable to access resources requiring identity-based rules. What is the most likely reason?

Question 24mediummulti select

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Check Point R81.20 Security Gateway using the Identity Collector method. Which two components are required for this deployment? (Choose two.)

Question 25easymultiple choice

Read the full Identity Awareness explanation →

A security administrator is configuring Identity Awareness on a Check Point R81.20 Security Gateway. The administrator wants to allow users to authenticate using their existing Active Directory credentials without deploying any software on user computers. Which Identity Awareness method should be used?

Question 26mediummultiple choice

Read the full Identity Awareness explanation →

An administrator configures Identity Awareness in a Check Point environment using Active Directory Query. Users report that access policies based on user groups fail intermittently for workstations after users lock their screens. Which underlying mechanism causes this authentication loss?

Question 27mediummultiple choice

Read the full Identity Awareness explanation →

An administrator needs to implement Identity Awareness to control access based on user groups. Which authentication method should be configured to ensure seamless transparency for users already logged into a Windows domain without requiring manual credentials input?

Question 28mediummultiple choice

Read the full Identity Awareness explanation →

Refer to the exhibit. An administrator is troubleshooting an issue where 'bob' is unable to access resources. Based on the CLI output, what is the most likely cause for the connectivity failure?

Exhibit

id_api -d
User: bob
IP: 10.0.0.5
Status: Active
Source: AD_Query
Timeout: 300s

Question 29easymultiple choice

Read the full Identity Awareness explanation →

Which of the following is the primary purpose of the Identity Awareness 'Captive Portal' feature?

Question 30hardmultiple choice

Study the full AAA explanation →

Refer to the exhibit. An administrator is configuring RADIUS authentication for Identity Awareness. What is the cause of this error log?

Exhibit

Log Message: 'User identification failed: RADIUS shared secret mismatch.'

Question 31mediummultiple choice

Read the full Identity Awareness explanation →

What is the primary benefit of using 'Identity Sharing' between multiple Check Point Security Gateways?

Question 32mediummulti select

Read the full Identity Awareness explanation →

Which TWO settings are required when configuring the 'Active Directory Query' method in the Identity Awareness blade?

Question 33mediummultiple choice

Read the full Identity Awareness explanation →

Which of the following describes the function of the 'Identity Awareness Gateway' in a load-sharing cluster?

Question 34mediummultiple choice

Read the full Identity Awareness explanation →

Which of the following is a recommended best practice when using Identity Awareness for internal network security?

Question 35mediummultiple choice

Read the full wireless explanation →

An administrator wants to ensure that mobile devices are correctly identified. Which method is most appropriate for mobile device identity identification in a Wi-Fi environment?

Question 36hardmultiple choice

Read the full Identity Awareness explanation →

Refer to the exhibit. Why are users on non-domain machines labeled as 'unknown'?

Exhibit

Identity Awareness Configuration: 
- AD Query: Enabled
- Captive Portal: Disabled
- Identity Agent: Disabled

Result: Users on non-domain machines are 'unknown'.

Question 37mediummultiple choice

Read the full Identity Awareness explanation →

An administrator configures Identity Awareness using Active Directory Query to authenticate domain users. After deployment, users report intermittent authentication failures, and logs show that the Security Gateway fails to query the Domain Controllers due to insufficient privileges. Which account permission must be granted to resolve this issue without granting Domain Administrator rights?

Question 38mediummultiple choice

Read the full Identity Awareness explanation →

Refer to the exhibit. An administrator reviews the Identity Awareness status of a user workstation using CLI commands on the Security Gateway. What does the 'Identity Source: Identity Agent' field specifically indicate about how this user's identity was acquired?

Exhibit

Host: 192.168.10.50
Status: Connected
Identity Source: Identity Agent
Roles: [Finance_Dept, Domain_Users]
Authentication Method: Kerberos
Session Timeout: 480 minutes

Question 39mediummultiple choice

Read the full Identity Awareness explanation →

When configuring Access Control policies based on Identity Awareness roles, an administrator places an identity-based rule above a traditional IP-based rule. A user authenticated via Identity Awareness attempts to access a blocked server. The rule base evaluates the connection and matches the user against the identity rule. What happens to the connection?

Question 40hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator is using Identity Awareness with Identity Agents in 'Browser-Based' mode. Users report they are prompted for authentication twice. What is the most likely cause?

Question 41mediummultiple choice

Read the full Identity Awareness explanation →

Which command is used to clear the user sessions in the Identity Awareness database on a Security Gateway?

Question 42mediummultiple choice

Read the full Identity Awareness explanation →

What is the primary function of the 'Identity Collector' in a distributed Identity Awareness environment?

Question 43hardmultiple choice

Read the full Identity Awareness explanation →

An administrator is troubleshooting an issue where users are identified as 'Unknown' despite having Identity Awareness enabled. What is the first logical step to investigate?

Question 44hardmultiple choice

Read the full Identity Awareness explanation →

An administrator has configured Identity Awareness with Terminal Server Agent on a Terminal Server. Users report that after disconnecting from a Remote Desktop session and reconnecting, they are sometimes identified as the previous user. What is the most likely cause of this issue?

Question 45mediummulti select

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Check Point R81.20 Security Gateway using the Identity Collector. The administrator wants to ensure that the Identity Collector can retrieve user identity information from Active Directory. Which two components are required for the Identity Collector to function? (Choose two.)

Question 46easymultiple choice

Read the full Identity Awareness explanation →

A company wants users on managed Windows endpoints to be identified by Identity Awareness without requiring them to open a browser or wait for an AD event log poll. The endpoints are domain-joined and already managed by the organization. Which acquisition method meets this requirement most directly?

Question 47mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator manages a Check Point R81.20 environment with a Security Gateway and a separate Identity Collector. Users authenticate through Microsoft Active Directory, and the administrator wants to minimize the number of AD queries sent from the gateway. Which configuration should the administrator use to achieve this?

Question 48hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator has configured Identity Awareness with AD Query on a Check Point R81.20 Security Gateway. Users report that they can access resources immediately after logging in, but after a password change, some users are still identified with their old group memberships for an extended period. What is the most likely cause of this behavior?

Question 49hardmulti select

Read the full Identity Awareness explanation →

An administrator is troubleshooting an Identity Awareness deployment where some users are intermittently shown as unidentified on the Security Gateway. The environment uses AD Query. Which TWO conditions would cause AD Query to fail to identify a logged-in user? (Choose two.)

Question 50mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator must let contractors on personally owned, non-domain laptops access internal resources. The contractors cannot install endpoint software, and the organization wants them to authenticate through a web page before access is granted. Which Identity Awareness acquisition method fits these constraints?

Question 51mediummultiple choice

Read the full Identity Awareness explanation →

An administrator configures Identity Awareness with Active Directory Query on an R81.20 Security Gateway. Users are authenticated via Kerberos, and the gateway has been joined to the domain. However, after login, some users are not being identified. The administrator notices that the gateway's AD Query service account password has expired. What is the most likely cause of the identification failure?

Question 52hardmultiple choice

Read the full Identity Awareness explanation →

An administrator configures Identity Awareness to use AD Query and creates an Access Control rule allowing the 'Sales' identity group to reach a CRM server. Users in Sales are identified, yet some still get blocked. Reviewing logs shows their sessions exist but the group membership is missing. Which configuration should the administrator verify first?

Question 53mediummultiple choice

Read the full Identity Awareness explanation →

An administrator is deploying Identity Awareness on a Check Point R81.20 Security Gateway. Users authenticate to a captive portal hosted by the gateway itself, without any external directory service. Which Identity Awareness method is being used?

Question 54hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator is deploying Identity Awareness using the Identity Collector in an environment with multiple domain controllers. The administrator wants to ensure that user identity information is collected from all domain controllers and that the load is distributed. Which configuration should be implemented?

Question 55hardmultiple choice

Read the full NAT/PAT explanation →

A security administrator manages a Check Point R81.20 environment with Identity Awareness using Active Directory Query. Users on domain-joined machines are identified correctly, but users who connect through a NAT device are consistently shown as unknown. What is the most likely cause?

Question 56easymultiple choice

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Security Gateway and wants to enable users to authenticate via a web portal before accessing network resources. The administrator wants to minimize user disruption and avoid installing additional software. Which Identity Awareness method should be used?

Question 57mediummultiple choice

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Check Point R81.20 Security Gateway. The company uses a single Active Directory domain and wants to identify users without installing any software on client machines. Which Identity Awareness method should the administrator choose?

Question 58hardmultiple choice

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Check Point R81.20 gateway using the Identity Collector. Users are authenticated via multiple Active Directory domains in a forest. The administrator notices that users from one domain are not being identified. What is the most likely cause?

Question 59mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator is configuring Identity Awareness with Terminal Server Agent on a Citrix server. Users report that after logging off and logging back in, they are still associated with their previous session, causing policy inconsistencies. What is the most likely cause of this issue?

Question 60hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator has deployed Identity Awareness with Terminal Server Agent on a Check Point R81.20 gateway. Users report that their identities are correctly identified when they log in, but after disconnecting and reconnecting to a different session on the same terminal server, they are still associated with the old session. What is the most likely cause?

Question 1hardmulti select

Read the full Identity Awareness explanation →

Which TWO of the following statements accurately describe the functionality of the Identity Awareness 'Identity Collector'?

Question 2hardmulti select

Read the full Identity Awareness explanation →

Which THREE of the following are valid Identity Awareness 'Identity Sources' that can be used to identify users?

Question 3mediummultiple choice

Read the full Identity Awareness explanation →

An administrator notices that some users are identified correctly while others show as 'unknown'. What is the most likely reason for this discrepancy in an Identity Awareness environment using AD Query?

Question 4hardmultiple choice

Read the full Identity Awareness explanation →

Refer to the exhibit. An administrator receives this error on a client machine. Which configuration error on the gateway is the most likely cause?

Exhibit

Error: 'Identity Agent failed to connect to the gateway. Please check the gateway's Identity Awareness configuration.'

Question 5hardmulti select

Read the full Identity Awareness explanation →

When designing an Identity Awareness deployment utilizing Terminal Servers, an administrator must select the appropriate tracking mechanisms to ensure accurate user identification. Which TWO mechanisms are natively supported by Check Point Identity Awareness for Terminal Server environments? (Choose two)

Question 6hardmulti select

Review the full subnetting walkthrough →

An administrator notices that Active Directory Query is failing to resolve user identities for a newly established subnet of workstations. The Security Gateway and Domain Controllers can communicate via ICMP, but queries fail. Which TWO troubleshooting steps should the administrator perform to resolve this issue? (Choose two)

Question 7mediummultiple choice

Read the full Identity Awareness explanation →

Which Identity Awareness method is best suited for an environment where users utilize non-domain joined devices and require seamless authentication without client software?

Question 8mediummultiple choice

Review the full subnetting walkthrough →

An administrator notices that Identity Awareness is not correctly identifying users from a specific subnet. The gateway is configured with AD Query. Which log source should the administrator check to verify the gateway is receiving successful login events?

Question 9mediummulti select

Read the full Identity Awareness explanation →

Which TWO of the following are prerequisites for configuring Identity Awareness with AD Query?

Question 10mediummulti select

Read the full Identity Awareness explanation →

Which THREE of the following are valid Identity Awareness sources for identifying users?

Question 11mediummultiple choice

Read the full Identity Awareness explanation →

Which object type should an administrator use in a Firewall rule to restrict access based on Active Directory group membership?

Question 12hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator has deployed a single Security Gateway running R81.20 with Identity Awareness configured to use the Terminal Server Agent method. Users authenticate to a Citrix XenApp terminal server, which then reports their identities to the Gateway. After several weeks in production, the administrator notices that user-to-IP mappings remain valid long after users disconnect, causing stale identities to be matched against firewall rules. The administrator verifies that the Terminal Server Agent is running and heartbeating normally, and that the Gateway is receiving updates. What is the MOST likely cause of the stale identity mappings?

Question 13mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator manages a Check Point R81.20 Security Gateway that enforces identity-based rules for users in an Active Directory domain. The organization wants to avoid installing any software on user computers and does not want to deploy a separate Identity Collector. Which Identity Awareness method should the administrator configure on the Security Gateway?

Question 14mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator manages a Check Point R81.20 Security Gateway that enforces identity-based rules for users authenticating through a Captive Portal. Users complain that they must log in every morning even though the portal shows a session timeout of 480 minutes. After reviewing the gateway configuration, the administrator notices that the Identity Awareness blade is set to use the 'AD Query' method only. Which action should the administrator take to resolve the frequent re-authentication?

Question 15mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator manages a Security Gateway where Identity Awareness is configured with both AD Query and Identity Agents (Captive Portal). Users who log into their domain-joined laptops via AD Query are also prompted by the Captive Portal, causing duplicate identity records and confusing session logs. Which action resolves this without disabling either acquisition method entirely?

Question 16easymultiple choice

Read the full Identity Awareness explanation →

A security administrator is deploying Identity Awareness on a Check Point R81.20 Security Gateway. The organization wants to identify users without installing any software on the user computers and without requiring the gateway to be a domain member. Which Identity Awareness method should the administrator use?

Question 17hardmulti select

Read the full Identity Awareness explanation →

An administrator is deploying Identity Awareness in a Check Point R81.20 environment. The company uses both domain-joined Windows workstations and non-domain-joined Linux servers. The administrator wants to ensure that users on both types of systems are identified. Which two methods should be configured to meet this requirement? (Choose two.)

Question 18mediummultiple choice

Read the full DHCP explanation →

A security administrator manages a Check Point R81.20 Security Gateway that protects a network where users authenticate through a Captive Portal. The administrator wants to prevent users from having to log in again every time their IP address changes due to DHCP lease renewal. Which Identity Awareness configuration should be implemented?

Question 19easymultiple choice

Read the full Identity Awareness explanation →

A security administrator has configured Identity Awareness on a Security Gateway using AD Query. Users report that after changing their passwords, they are still identified as the old user in the logs. The administrator verifies that the gateway can reach the domain controllers. What is the most likely cause of this issue?

Question 20easymultiple choice

Read the full Identity Awareness explanation →

A security administrator needs to configure Identity Awareness on a Check Point R81.20 Security Gateway so that users are identified by reading security event logs from domain controllers. Which Identity Awareness method should be selected?

Question 21hardmulti select

Read the full Identity Awareness explanation →

An administrator is troubleshooting Identity Awareness on an R81.20 Security Gateway. Users are intermittently identified as 'unknown' even though AD Query is configured and the service account is valid. The administrator suspects that the issue is related to the way identities are shared with other gateways. Which two statements about Identity Awareness identity sharing are correct? (Choose two.)

Question 22hardmultiple choice

Review the full subnetting walkthrough →

A security administrator is troubleshooting an Identity Awareness deployment that uses Identity Collector. Users on a specific subnet are intermittently identified as 'unknown' in the logs, while users on other subnets are consistently identified. The Identity Collector service is running and has a valid connection to the Security Gateway. What is the most likely cause of this intermittent identification failure?

Question 23mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator has configured Identity Awareness using Active Directory Query on a Check Point R81.20 Security Gateway. Users report that after changing their password, they are unable to access resources requiring identity-based rules. What is the most likely reason?

Question 24mediummulti select

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Check Point R81.20 Security Gateway using the Identity Collector method. Which two components are required for this deployment? (Choose two.)

Question 25easymultiple choice

Read the full Identity Awareness explanation →

A security administrator is configuring Identity Awareness on a Check Point R81.20 Security Gateway. The administrator wants to allow users to authenticate using their existing Active Directory credentials without deploying any software on user computers. Which Identity Awareness method should be used?

Question 26mediummultiple choice

Read the full Identity Awareness explanation →

An administrator configures Identity Awareness in a Check Point environment using Active Directory Query. Users report that access policies based on user groups fail intermittently for workstations after users lock their screens. Which underlying mechanism causes this authentication loss?

Question 27mediummultiple choice

Read the full Identity Awareness explanation →

An administrator needs to implement Identity Awareness to control access based on user groups. Which authentication method should be configured to ensure seamless transparency for users already logged into a Windows domain without requiring manual credentials input?

Question 28mediummultiple choice

Read the full Identity Awareness explanation →

Refer to the exhibit. An administrator is troubleshooting an issue where 'bob' is unable to access resources. Based on the CLI output, what is the most likely cause for the connectivity failure?

Exhibit

id_api -d
User: bob
IP: 10.0.0.5
Status: Active
Source: AD_Query
Timeout: 300s

Question 29easymultiple choice

Read the full Identity Awareness explanation →

Which of the following is the primary purpose of the Identity Awareness 'Captive Portal' feature?

Question 30hardmultiple choice

Study the full AAA explanation →

Refer to the exhibit. An administrator is configuring RADIUS authentication for Identity Awareness. What is the cause of this error log?

Exhibit

Log Message: 'User identification failed: RADIUS shared secret mismatch.'

Question 31mediummultiple choice

Read the full Identity Awareness explanation →

What is the primary benefit of using 'Identity Sharing' between multiple Check Point Security Gateways?

Question 32mediummulti select

Read the full Identity Awareness explanation →

Which TWO settings are required when configuring the 'Active Directory Query' method in the Identity Awareness blade?

Question 33mediummultiple choice

Read the full Identity Awareness explanation →

Which of the following describes the function of the 'Identity Awareness Gateway' in a load-sharing cluster?

Question 34mediummultiple choice

Read the full Identity Awareness explanation →

Which of the following is a recommended best practice when using Identity Awareness for internal network security?

Question 35mediummultiple choice

Read the full wireless explanation →

An administrator wants to ensure that mobile devices are correctly identified. Which method is most appropriate for mobile device identity identification in a Wi-Fi environment?

Question 36hardmultiple choice

Read the full Identity Awareness explanation →

Refer to the exhibit. Why are users on non-domain machines labeled as 'unknown'?

Exhibit

Identity Awareness Configuration: 
- AD Query: Enabled
- Captive Portal: Disabled
- Identity Agent: Disabled

Result: Users on non-domain machines are 'unknown'.

Question 37mediummultiple choice

Read the full Identity Awareness explanation →

An administrator configures Identity Awareness using Active Directory Query to authenticate domain users. After deployment, users report intermittent authentication failures, and logs show that the Security Gateway fails to query the Domain Controllers due to insufficient privileges. Which account permission must be granted to resolve this issue without granting Domain Administrator rights?

Question 38mediummultiple choice

Read the full Identity Awareness explanation →

Refer to the exhibit. An administrator reviews the Identity Awareness status of a user workstation using CLI commands on the Security Gateway. What does the 'Identity Source: Identity Agent' field specifically indicate about how this user's identity was acquired?

Exhibit

Host: 192.168.10.50
Status: Connected
Identity Source: Identity Agent
Roles: [Finance_Dept, Domain_Users]
Authentication Method: Kerberos
Session Timeout: 480 minutes

Question 39mediummultiple choice

Read the full Identity Awareness explanation →

When configuring Access Control policies based on Identity Awareness roles, an administrator places an identity-based rule above a traditional IP-based rule. A user authenticated via Identity Awareness attempts to access a blocked server. The rule base evaluates the connection and matches the user against the identity rule. What happens to the connection?

Question 40hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator is using Identity Awareness with Identity Agents in 'Browser-Based' mode. Users report they are prompted for authentication twice. What is the most likely cause?

Question 41mediummultiple choice

Read the full Identity Awareness explanation →

Which command is used to clear the user sessions in the Identity Awareness database on a Security Gateway?

Question 42mediummultiple choice

Read the full Identity Awareness explanation →

What is the primary function of the 'Identity Collector' in a distributed Identity Awareness environment?

Question 43hardmultiple choice

Read the full Identity Awareness explanation →

An administrator is troubleshooting an issue where users are identified as 'Unknown' despite having Identity Awareness enabled. What is the first logical step to investigate?

Question 44hardmultiple choice

Read the full Identity Awareness explanation →

An administrator has configured Identity Awareness with Terminal Server Agent on a Terminal Server. Users report that after disconnecting from a Remote Desktop session and reconnecting, they are sometimes identified as the previous user. What is the most likely cause of this issue?

Question 45mediummulti select

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Check Point R81.20 Security Gateway using the Identity Collector. The administrator wants to ensure that the Identity Collector can retrieve user identity information from Active Directory. Which two components are required for the Identity Collector to function? (Choose two.)

Question 46easymultiple choice

Read the full Identity Awareness explanation →

A company wants users on managed Windows endpoints to be identified by Identity Awareness without requiring them to open a browser or wait for an AD event log poll. The endpoints are domain-joined and already managed by the organization. Which acquisition method meets this requirement most directly?

Question 47mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator manages a Check Point R81.20 environment with a Security Gateway and a separate Identity Collector. Users authenticate through Microsoft Active Directory, and the administrator wants to minimize the number of AD queries sent from the gateway. Which configuration should the administrator use to achieve this?

Question 48hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator has configured Identity Awareness with AD Query on a Check Point R81.20 Security Gateway. Users report that they can access resources immediately after logging in, but after a password change, some users are still identified with their old group memberships for an extended period. What is the most likely cause of this behavior?

Question 49hardmulti select

Read the full Identity Awareness explanation →

An administrator is troubleshooting an Identity Awareness deployment where some users are intermittently shown as unidentified on the Security Gateway. The environment uses AD Query. Which TWO conditions would cause AD Query to fail to identify a logged-in user? (Choose two.)

Question 50mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator must let contractors on personally owned, non-domain laptops access internal resources. The contractors cannot install endpoint software, and the organization wants them to authenticate through a web page before access is granted. Which Identity Awareness acquisition method fits these constraints?

Question 51mediummultiple choice

Read the full Identity Awareness explanation →

An administrator configures Identity Awareness with Active Directory Query on an R81.20 Security Gateway. Users are authenticated via Kerberos, and the gateway has been joined to the domain. However, after login, some users are not being identified. The administrator notices that the gateway's AD Query service account password has expired. What is the most likely cause of the identification failure?

Question 52hardmultiple choice

Read the full Identity Awareness explanation →

An administrator configures Identity Awareness to use AD Query and creates an Access Control rule allowing the 'Sales' identity group to reach a CRM server. Users in Sales are identified, yet some still get blocked. Reviewing logs shows their sessions exist but the group membership is missing. Which configuration should the administrator verify first?

Question 53mediummultiple choice

Read the full Identity Awareness explanation →

An administrator is deploying Identity Awareness on a Check Point R81.20 Security Gateway. Users authenticate to a captive portal hosted by the gateway itself, without any external directory service. Which Identity Awareness method is being used?

Question 54hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator is deploying Identity Awareness using the Identity Collector in an environment with multiple domain controllers. The administrator wants to ensure that user identity information is collected from all domain controllers and that the load is distributed. Which configuration should be implemented?

Question 55hardmultiple choice

Read the full NAT/PAT explanation →

A security administrator manages a Check Point R81.20 environment with Identity Awareness using Active Directory Query. Users on domain-joined machines are identified correctly, but users who connect through a NAT device are consistently shown as unknown. What is the most likely cause?

Question 56easymultiple choice

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Security Gateway and wants to enable users to authenticate via a web portal before accessing network resources. The administrator wants to minimize user disruption and avoid installing additional software. Which Identity Awareness method should be used?

Question 57mediummultiple choice

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Check Point R81.20 Security Gateway. The company uses a single Active Directory domain and wants to identify users without installing any software on client machines. Which Identity Awareness method should the administrator choose?

Question 58hardmultiple choice

Read the full Identity Awareness explanation →

An administrator is configuring Identity Awareness on a Check Point R81.20 gateway using the Identity Collector. Users are authenticated via multiple Active Directory domains in a forest. The administrator notices that users from one domain are not being identified. What is the most likely cause?

Question 59mediummultiple choice

Read the full Identity Awareness explanation →

A security administrator is configuring Identity Awareness with Terminal Server Agent on a Citrix server. Users report that after logging off and logging back in, they are still associated with their previous session, causing policy inconsistencies. What is the most likely cause of this issue?

Question 60hardmultiple choice

Read the full Identity Awareness explanation →

A security administrator has deployed Identity Awareness with Terminal Server Agent on a Check Point R81.20 gateway. Users report that their identities are correctly identified when they log in, but after disconnecting and reconnecting to a different session on the same terminal server, they are still associated with the old session. What is the most likely cause?