156-315.81.20 Gateway Deployment and Upgrades Practice Question
An administrator is deploying a new R81.20 Security Gateway using the Gaia First Time Configuration Wizard. During the wizard, the administrator is prompted to select the 'Security Gateway' role. Which additional configuration is required to complete the deployment?
⚠ Common exam trap
The trap here is thinking that a gateway must first be a management server or that DHCP is required, when the key requirement is SIC and management server connectivity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The administrator must specify the Security Management Server's IP address and the gateway's SIC (Secure Internal Communication) activation key.
During the Gaia First Time Configuration Wizard, selecting the Security Gateway role prompts for the Security Management Server's IP address and a SIC activation key. These are essential to establish trusted communication between the gateway and the management server, enabling the gateway to be managed and to receive security policies. Without this information, the gateway cannot be added to the management server or function as a managed Security Gateway.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The administrator must specify the Security Management Server's IP address and the gateway's SIC (Secure Internal Communication) activation key.
Why this is correct
When configuring a gateway as a Security Gateway, the First Time Configuration Wizard requires the management server's IP address and a one-time SIC activation key. This establishes secure communication between the gateway and the management server, allowing the gateway to be managed and to receive its policy. Without this, the gateway cannot be recognized or managed.
- ✗
The administrator must configure the gateway as a standalone management server and then convert it to a managed gateway.
Why it's wrong here
The First Time Configuration Wizard allows direct configuration as a managed Security Gateway. There is no need to first set it up as a standalone management server and then convert it. That would be an unnecessary and incorrect step. The wizard handles the managed gateway setup directly.
- ✗
The administrator must enable the 'Management Server' role and install a policy locally.
Why it's wrong here
Enabling the Management Server role is for a Security Management Server, not a Security Gateway. A gateway does not need to be a management server. Installing a policy locally is not possible without a management server. This option confuses the roles and would not complete the gateway deployment.
- ✗
The administrator must configure the gateway to use DHCP and obtain its IP address automatically.
Why it's wrong here
While DHCP can be used for the gateway's interface IP, it is not a requirement for the Security Gateway role. The wizard allows static IP configuration as well. The critical requirement is the management server and SIC key, not DHCP. This option is a distractor about network configuration.
About these practice questions
Courseiva writes every 156-315.81.20 question from scratch — 210 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This 156-315.81.20 practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 156-315.81.20 exam.