156-215.81.20 Application Control and URL Filtering Practice Question
An administrator wants to enforce a policy that blocks access to websites categorized as 'Hacking' but allows access to 'Computer Security' sites. The administrator creates a URL Filtering rule with the action 'Block' for the 'Hacking' category and places it above a rule that allows 'Computer Security'. However, users report that they can still access some hacking-related sites. Upon investigation, the administrator finds that these sites are categorized as 'Computer Security' by the Check Point URL Filtering database. What should the administrator do to ensure these sites are blocked?
⚠ Common exam trap
The trap here is relying solely on the default categorization and assuming it is always accurate; in reality, custom categories are needed to override misclassifications.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a custom category that includes these specific URLs and block that category.
When Check Point's URL Filtering database categorizes sites incorrectly, administrators can create custom categories to explicitly define which URLs should be blocked or allowed. Custom categories take precedence over the default database, allowing precise control. This approach ensures that specific hacking-related sites are blocked even if they are misclassified as 'Computer Security'.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Update the URL Filtering database and wait for the next scheduled update.
Why it's wrong here
Updating the database may eventually correct the categorization, but it is not a guaranteed immediate fix. The administrator needs a deterministic solution now. Moreover, the database update might not reclassify these specific sites if they are legitimately considered security-related. The problem requires an immediate, reliable block.
- ✓
Create a custom category that includes these specific URLs and block that category.
Why this is correct
Since the Check Point categorization engine misclassifies these sites, the administrator can create a custom category containing the URLs and then block that category in the URL Filtering policy. This overrides the default categorization and ensures the sites are blocked regardless of their assigned category.
- ✗
Enable 'HTTPS Inspection' to decrypt the traffic and then block based on content.
Why it's wrong here
HTTPS Inspection decrypts traffic for deep content inspection, but the issue is categorization, not content. Even with inspection, the site would still be categorized as 'Computer Security' and allowed. While inspection can help detect malicious content, it does not change the category assignment, so it would not block these sites based on category.
- ✗
Modify the rule to block all sites that are not explicitly allowed.
Why it's wrong here
Changing to a default-deny approach would block all sites not explicitly allowed, including legitimate business sites, causing significant disruption. The requirement is to block specific hacking sites while allowing security sites. A blanket block is overly broad and does not address the misclassification issue directly.
About these practice questions
Courseiva writes every 156-215.81.20 question from scratch — 210 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This 156-215.81.20 practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 156-215.81.20 exam.