156-215.81.20 Identity Awareness Practice Question
Which of the following is the primary purpose of the Identity Awareness 'Captive Portal' feature?
⚠ Common exam trap
Candidates mistakenly believe the Captive Portal is the primary identification method for all users, failing to understand it is a fallback mechanism used only when transparent methods fail.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To provide authentication for users not identified by transparent methods.
The Captive Portal serves as a fallback authentication mechanism for users who are not automatically identified by transparent methods like AD Query or Identity Agents. It presents a web page to the user, forcing them to authenticate before granting access to network resources. This ensures that even unmanaged devices or users who cannot be identified through automated means can still have their traffic logged and controlled by the gateway.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To hide the identity of the user from internal logging servers.
Why it's wrong here
The Captive Portal is designed to explicitly capture user identity, not hide it. Its primary goal is to ensure that user traffic is associated with a specific identity, allowing the Security Gateway to apply group-based policies and maintain accurate audit logs for compliance and security monitoring purposes.
- ✓
To provide authentication for users not identified by transparent methods.
Why this is correct
The Captive Portal is the primary fallback method for Identity Awareness. It ensures that when transparent methods (like AD Query) fail or are unavailable for certain users or devices, the firewall can still enforce security policies by requiring explicit authentication via a web browser before allowing network traffic.
- ✗
To automatically install Identity Agents on client machines.
Why it's wrong here
The Captive Portal does not install software on client machines. While it can prompt users to download an agent, its core function is authentication. Automatic agent installation is handled through centralized software deployment tools like Group Policy Objects or other endpoint management solutions, not through the web authentication portal.
- ✗
To encrypt traffic between the user and the internal file servers.
Why it's wrong here
Captive Portal focuses on authentication and identity verification, not data encryption. Traffic encryption for file servers is typically handled by protocols like SMB/CIFS with encryption or IPsec tunnels, whereas the Captive Portal operates at the gateway layer to verify who is attempting to access the network.
About these practice questions
One of 210 original 156-215.81.20 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This 156-215.81.20 practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 156-215.81.20 exam.