156-315.81.20 Identity Awareness Practice Question
Which Identity Awareness source is best suited for identifying users connecting from non-Windows devices like mobile phones or tablets?
⚠ Common exam trap
Candidates frequently select 'Identity Agents' because it is a common method, forgetting that mobile devices and non-Windows platforms do not support the installation of the Check Point Identity Agent software.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Captive Portal
For non-Windows devices that cannot use AD Query or Identity Agents, Captive Portal is the most effective solution. It provides a web-based authentication interface that works across all platforms, ensuring that users on mobile devices are correctly identified and authenticated before being granted access to network resources. This platform-agnostic approach is essential for supporting modern Bring Your Own Device (BYOD) policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AD Query
Why it's wrong here
AD Query relies on Windows Event Logs and RPC/WMI, which are exclusive to Windows domain-joined machines. It cannot natively identify users on non-Windows devices such as smartphones or tablets that do not participate in the domain, making it unsuitable for this scenario where cross-platform support is required.
- ✗
Identity Agent
Why it's wrong here
Identity Agents are software components designed for specific operating systems, primarily Windows. They cannot be installed on many mobile devices or tablets, and even where they might exist, they are not a standard or efficient way to identify transient users on diverse mobile platforms in a typical network.
- ✓
Captive Portal
Why this is correct
Captive Portal is platform-independent because it uses standard web technologies like HTTP/HTTPS. Any device with a modern web browser can authenticate via the captive portal, making it the ideal solution for identifying mobile devices, tablets, and other non-Windows platforms that cannot support more specialized identification methods.
- ✗
Terminal Servers (Identity Agent)
Why it's wrong here
Terminal Server agents are designed specifically for Citrix or Microsoft Remote Desktop Services environments to identify users behind a single shared IP address. They are not intended for mobile devices or tablet authentication and would not function in the context of identifying individual mobile users on a network.
About these practice questions
This 156-315.81.20 question is part of Courseiva's 210-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Check Point exam blueprint
This 156-315.81.20 practice question is part of Courseiva's free Check Point certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 156-315.81.20 exam.