Skip to main content

156-560 Real Exam Questions

Check Point Certified Cloud Specialist

83 questions available · Page 1 of 9

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

What is the CloudGuard solution?

  1. A

    Check Point solution for private and public cloud

  2. B

    Check Point solution for public cloud

  3. C

    Check Point solution for private cloud

  4. D

    Check Point virtual gateway

Show answer and explanation

Correct answer: A

Question 2 Single choice

When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?

  1. A

    1. Verify process is running with `cloudguard on' and
    2. restart the api process with `api restart'

  2. B

    1. Verify process is running with `cloudguard on' and
    2. `test communication' button the Data Center Server object

  3. C

    1. Reboot the Security Management Server and
    2. restart the cloudguard process with `cloudguard on'

  4. D

    1. Reboot the Security Management Server and
    2. restart the api process with `api restart'

Show answer and explanation

Correct answer: B

Question 3 Single choice

Can you configure NAT for internal VM's on the Check Point Gateway in AWS?

  1. A

    Yes, you can add public IP's to the Check Point

  2. B

    No. ail the NAT is being done by the ELB

  3. C

    No, the public IPs are defined directly on the in

  4. D

    Yes, the NAT is only defined for internal LB

Show answer and explanation

Correct answer: C

Question 4 Single choice

CloudGuard uses several management tools to create and manage Security Policies.

Which is NOT one of those tools?

  1. A

    Gaia Portal

  2. B

    CloudGuard Controller

  3. C

    SmartConsole

  4. D

    CLI

Show answer and explanation

Correct answer: D

Question 5 Single choice

Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on-premises equipment, scripts, orchestration playbooks and CloudGuard Network cloud resources, on-premise equipment, scripts.

  1. A

    CloudGuard Management Extension API (CME-API)

  2. B

    CloudGuard Controller API (CG-API)

  3. C

    Representational State Transfer (REST) APIs

  4. D

    Cloud Security Posture Management (CSPM)

Show answer and explanation

Correct answer: A

Question 6 Single choice

The framework for cloud security consists of five basic components, or pillars Making small, reversible changes is a design principle of which of these five pillars

  1. A

    Reliability

  2. B

    Performance Efficiency

  3. C

    Cost Optimization

  4. D

    Operational Excellence

Show answer and explanation

Correct answer: D

Explanation

There are five design principles for operational excellence in the cloud: Perform operations as code Make frequent, small, reversible changes Refine operations procedures frequently Anticipate failure Learn from all operational failures

Question 7 Single choice

Where can I find solution templates for Azure?

  1. A

    On the market place

  2. B

    In a search on the Internet

  3. C

    At the relevant SK

  4. D

    In a special Azure page

Show answer and explanation

Correct answer: D

Question 8 Single choice

Which CloudGuard security platform enables organizations to view and access their security posture, find cloud misconfigurations, and enforce best practices?

  1. A

    CloudGuard laaS Private Cloud Solution

  2. B

    CloudGuard SaaS

  3. C

    CloudGuard Security Posture Management

  4. D

    CloudGuard laaS Public Cloud Solution

Show answer and explanation

Correct answer: C

Question 9 Single choice

When Cloud Security Posture Management discovers non-compliant cloud resources, CloudBot applications perform automated remediation's to correct any violations.

How true is this statement?

  1. A

    This is true, however it requires Full Protection access to the Cloud Account to perform automated remediation

  2. B

    This is not true, Cloud Security Posture Management (CSPIU) can only report non-compliance and cannot remediate by itself

  3. C

    This is partially true, however the automated remediation is not done by CloudBot applications but it is done by the Security Management Server

  4. D

    This is not true because CloudBot applications are used to provide chat service to respond to non-compliance alerts

Show answer and explanation

Correct answer: A

Question 10 Single choice

To travel between spokes, non-transitive traffic uses ________ to allow Ipv4 and IPv6 traffic to reach a spoke network

  1. A

    a VTI

  2. B

    the Northbound hub

  3. C

    the Southbound hub

  4. D

    Peering

Show answer and explanation

Correct answer: D