Free 156-560 Exam Dumps Preview

Question 1

Single choice

Cloud Security Posture Management operational modes for cloud accounts are:

1. A

   Read Only, Full Protection. Region Lock

2. B

   Read Only, Read/Write. Region Lock

3. C

   Read Only, Read/Write. Full Protection

4. D

   Read/Write, Partial Protection, Full Protection

Reveal answer details Close answer details

Correct answerA

Question 2

Single choice

What are two basic rules Check Point recommends for building an effective policy?

1. A

   Cleanup and Stealth Rule

2. B

   VPN and Admin Rules

3. C

   Implicit and Explicit Rules

4. D

   Access and Identity Rules

Reveal answer details Close answer details

Correct answerA

Question 3

Single choice

How is CloudGuard for Azure licensed in PAYG (Pay As You Go) mode?

1. A

   Per hour based on resources consumed

2. B

   Per Gateway

3. C

   Per Socket

4. D

   Per vCore

Reveal answer details Close answer details

Correct answerA

Question 4

Single choice

CloudGuard uses several management tools to create and manage Security Policies.

Which is NOT one of those tools?

1. A

   Gaia Portal

2. B

   CloudGuard Controller

3. C

   SmartConsole

4. D

   CLI

Reveal answer details Close answer details

Correct answerD

Question 5

Single choice

A utility that allows integration between SMS, the CloudGuard Network Solution, and CSPs, allowing the SMS to monitor and control scaling solutions in their associated cloud environments is called

1. A

   CloudGuard Management Extension (CME)

2. B

   CloudGuard Controller and Enforcer (CCE)

3. C

   CloudGuard Scanner and Enforcer (CSE)

4. D

   CloudGuard Controller (CC)

Reveal answer details Close answer details

Correct answerA

Question 6

Single choice

Why is an IAM role created when installing a cluster on AWS?

1. A

   In order to perform cluster related changes

2. B

   It is created for the installation process only, it gets deleted

3. C

   IAM role is created for auditing purposes

4. D

   IAM role is not created

Reveal answer details Close answer details

Correct answerC

Question 7

Single choice

Which of these is true of the CloudGuard Controller?

1. A

   CloudGuard Controller manually updates SmartConsole security tads and API connections

2. B

   CloudGuard Controller only displays cloud-based Security Gateway objects

3. C

   CloudGuard Controller maintains visibility of the protected cloud environment

4. D

   CoudGuard Control statically .denies Cloud resources created within a single cloud or a multi-cloud environment.

Reveal answer details Close answer details

Correct answerD

Question 8

Single choice

Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?

1. A

   $CPDIR/logs/cloud.elg

2. B

   $DADIR/logs/controller_proxy.elg

3. C

   $FWDIR/logs/cloud_controller.elg

4. D

   $FWDIR/logs/cloud_proxy.elg

Reveal answer details Close answer details

Correct answerD

Question 9

Single choice

Which pricing model gives administrators the ability to deploy devices as needed without the need to purchase blocks of vCore licenses?

1. A

   Pay As You Go

2. B

   Bring Your Own License

3. C

   Central licensing

4. D

   Local licensing

Reveal answer details Close answer details

Correct answerA

Question 10

Single choice

REST is an acronym for the following

1. A

   Representation of Security Traffic

2. B

   Really Efficient Security Template

3. C

   Representational State Transfer

4. D

   Real Security Threat

Reveal answer details Close answer details

Correct answerC

Explanation

The abbreviation REST stands for "Representational State Transfer" and refers to a software architectural style. It is based on six principles that describe how networked resources are defined and addressed on the web, for example in a cloud.

Question 11

Single choice

What is Reliability according to the Five Pillars?

1. A

   The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve

2. B

   The ability of a Workload to function correctly and consistently in all expected.

3. C

   The ability to support development and run workload effectively

4. D

   In terms of the cloud, security is about architecting every workload to prevent.

Reveal answer details Close answer details

Correct answerB

Explanation

The Reliability pillar encompasses the ability of a workload to perform its intended function correctly and consistently when it's expected to. This includes the ability to operate and test the workload through its total lifecycle. You can find prescriptive guidance on implementation in the Reliability Pillar whitepaper.

Question 12

Single choice

Which is not a Pillar of the Framework for the Cloud?

1. A

   Performance Efficiency

2. B

   Cost Optimization

3. C

   Scalability

4. D

   Reliability

Reveal answer details Close answer details

Correct answerC

Explanation

https://emergencetek.com/aws-five-pillars-of-a-well-architected-framework/#:~:text=AWS%20and%20their%20partners%20use,performance%20efficiency%2C%20and%20cost%20optimization.

Question 13

Single choice

Which is not a deployment method for CloudGuard solutions using

1. A

   Terraform

2. B

   Shell

3. C

   CLI

4. D

   CPS Portal

Reveal answer details Close answer details

Correct answerA