156-560 · Question #117
What are the methods to deploy a Check Point security Gateway on Azure?
The correct answer is A. PowerShell + Azure Portal (ARM). See the full explanation below for the reasoning.
Question
What are the methods to deploy a Check Point security Gateway on Azure?
Options
- APowerShell + Azure Portal (ARM)
- BPowerShell + Azure Security Center
- CAzure Portal (ARM)
- DAzure Security Center + Azure Portal (ARM)
How the community answered
(38 responses)- A76% (29)
- B5% (2)
- C5% (2)
- D13% (5)
Community Discussion
7A is your answer, and if you picked anything with Azure Security Center you need to go back to the Check Point CloudGuard documentation because Security Center is a monitoring and posture management tool, not a deployment mechanism. Check Point explicitly documents two supported methods for getting a Security Gateway up in Azure, which are the Azure Portal using ARM templates and PowerShell, so that rules out C right away since it only covers half the picture. The ARM templates let you spin up the gateway through the portal UI with predefined configurations, and PowerShell gives you the scripted, repeatable path that most enterprise shops actually use in production. Know both methods cold because Check Point loves to test whether you understand the actual deployment tooling versus the broader Azure ecosystem services that just happen to sound relevant.
Saw this exact question on my 156-560 sitting last spring and almost second-guessed myself because Azure Security Center sounds plausible until you remember it is a monitoring and compliance tool, not a deployment mechanism. The two actual deployment paths for a Check Point gateway on Azure are ARM templates via the portal and PowerShell automation, so A is the only correct combination, and B and D are just Microsoft distractors stuffed in there to catch people who only skimmed the cloud deployment chapter.
A, PowerShell plus ARM portal, saw this exact pair called out in the SMO Azure deployment lab and it was on my actual exam, eliminated B and D fast since Security Center is monitoring, not a deployment method.
Saw this exact one last week, almost picked C but remembered PowerShell is listed in the official deployment methods alongside ARM, so A saved me.
PowerShell being in the official list is a good catch, but worth remembering it deploys via Az module cmdlets, not the PowerShell DSC path that trips people up on wording questions.
B, PowerShell plus Azure Security Center is the pair my cards have locked in.
Hey Ingrid, A is the right call here, PowerShell is a management and automation tool, not a security monitoring or detection solution, so it does not satisfy what the question is actually testing for in that pairing.