CheckPoint 156-560 Online Practice Questions and Exam Preparation

CheckPoint 156-560 Online Questions & Answers

• Question 1:

  Which of these is true of the CloudGuard Controller?

  A. CloudGuard Controller manually updates SmartConsole security tads and API connections
  B. CloudGuard Controller only displays cloud-based Security Gateway objects
  C. CloudGuard Controller maintains visibility of the protected cloud environment
  D. CoudGuard Control statically .denies Cloud resources created within a single cloud or a multi-cloud environment.
  D. CoudGuard Control statically .denies Cloud resources created within a single cloud or a multi-cloud environment.

• Question 2:

  Which solution delivers a software platform for public cloud security and compliance orchestration?

  A. CloudGuard Network Public
  B. CloudGuard Network Private
  C. CloudGuard SaaS
  D. Cloud Security Posture Management
  D. Cloud Security Posture Management

• Question 3:

  The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________

  A. The SDDC, CloudGuard Security Gateways, and the Security Management Server
  B. The SDDC and CloudGuard Security Gateways.
  C. The SDDC and the Security Management Server
  D. CloudGuard Security Gateways and the Security Management Server
  A. The SDDC, CloudGuard Security Gateways, and the Security Management Server

• Question 4:

  What can Data Center Objects represent?

  A. vNets. VPCs or Network Security Groups
  B. Compute. Regions or Availability Zones
  C. Public IP. Private IP NAT or IAM roles
  D. Cloud Data Center. Tags, subnets, or hosts
  C. Public IP. Private IP NAT or IAM roles

• Question 5:

  What can a Security Admin do in a situation where collecting additional log file information to examine a CloudGuard Controller issue is required?

  A. Execute a debug on the SMS
  B. Set the operation to TRACE to collect more data.
  C. Verify connectivity between the SMS and the SDDC.
  D. Search for the information in the objects database.
  C. Verify connectivity between the SMS and the SDDC.

• Question 6:

  In a CloudGuard deployment, what does the acronym IAM stand for?

  A. Information and Adaptability Measures
  B. IP Address Management
  C. Identity and Access Management
  D. Instant Access Management
  C. Identity and Access Management

• Question 7:

  One of the five pillars of the framework for cloud security is `Performance Efficiency'. The design principles of Performance Efficiency include:

  A. Automatically recover from failure Test recovery procedures
  B. Adopt a consumption model Measure overall efficiency
  C. Go Global in minutes Use serverless architectures
  D. Apply security at all layers Automate security best practices
  C. Go Global in minutes Use serverless architectures

  ---

  Explanation/Reference:

  erformance Efficiency

  *

  The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand chandes and technologies evolve

  *

  Design Priniciples: > Democratize advanced technologies > Go Global in minutes > Use serverless architectures > Experiment ore often > Consider mechanical sympathy

• Question 8:

  How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

  A. It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.
  B. Micro-segmentation does not create boundaries.
  C. It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic
  D. It places inspection points between different applications, services, and single hosts within the same network segment.
  A. It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.

• Question 9:

  How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?

  A. Per usage
  B. Per Socket
  C. Per vCore
  D. Per Gateway
  C. Per vCore

• Question 10:

  How does the Cloud Security Posture Management (CSPM) service deliver intelligence threat feeds, enforce compliance policies, and apply security enhancement to the environment.

  A. The Cloud Security Posture Management (CSPM) does this by using the SOAP protocol and XML
  B. The Cloud Security Posture Management (CSPM) does this by .usingSSH and microagents
  C. The Cloud Security Posture Management (CSPM) does this by using REST APIs
  D. The Cloud Security Posture Management (CSPM) does this by using SIC connections on the cloud
  D. The Cloud Security Posture Management (CSPM) does this by using SIC connections on the cloud