156-560 Exam Questions
131 real 156-560 exam questions with expert-verified answers and explanations. Page 2 of 3.
- Question #51
Which software blades (Check Point features) are not supported in AWS?
- Question #52
How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?
- Question #53
On Azure, can you deploy a Check Point Standalone installation (Management + GW)?
- Question #54
How many AWS Internet gateways can you define in AWS?
- Question #55
How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?
- Question #56
Can you configure NAT for internal VM's on the Check Point Gateway in AWS?
- Question #57
What is the CloudGuard solution?
- Question #58
When using system routes and user defined routes in Azure, which takes precedent?
- Question #59Introduction to Cloud Security Concepts
Which is not a responsibility of the Customer?
shared responsibility modelcustomer responsibilitiesinfrastructure patchingcloud provider - Question #60Introduction to Cloud Security Concepts
What is the primary difference between Vertical and Horizontal autoscaling?
autoscalingvertical scalinghorizontal scalingcloud infrastructure - Question #61CloudGuard Architecture and Deployment
What part of the Secure Public Cloud Blueprint may be housed in on-premises equipment?
Secure Public Cloud BlueprintSecurity Management Serveron-premises deploymenthybrid architecture - Question #62CloudGuard Architecture and Deployment
Which utility allows integration between the Check Point Security Management Server, the CloudGuard Network solution, and the CSPs?
CloudGuard Management ExtensionCSP integrationSecurity Management ServerCloudGuard Network - Question #63
Security Management Servers deployed in a cloud environment can manage which of the following gateways?
- Question #64CloudGuard Architecture and Deployment
Automated Security Policy enforcement requires coordinated effort between the Security Management Server, the Security Gateway and:
CloudGuard Controllerautomated policy enforcementSecurity Management ServerSecurity Gateway - Question #65CloudGuard Architecture and Deployment
How many gateways are supported in a High Availability solution?
High Availabilitygateway clusterHA configurationredundancy - Question #66Introduction to Cloud Security Concepts
What do Workloads require to automate processes?
APIworkload automationprocess automationcloud integration - Question #67
Clouds use orchestration platforms to accomplish various deployment tasks. Which of the following is NOT one of those tasks?
- Question #68CloudGuard Architecture and Deployment
What is a Security Zone?
Security Zonenetwork interfacescentrally managed gatewaysnetwork segmentation - Question #69
In Amazon Web Services, what is the level of segmentation you can achieve?
- Question #70
Can you change the Check Point prepared solution templates for Azure to fit your needs?
- Question #71
On Azure, can you deploy a Check Point Standalone installation (Management + GW)?
- Question #72Introduction to Cloud Security Concepts
Which of the following is the Customer's Responsibility in the shared responsibility model used in the cloud?
shared responsibility modelcustomer responsibilitiesemployee trainingcloud security - Question #73
Which of the following is a common limitation of cloud platforms?
- Question #74
Which Pillar includes the following principals? - Experiment more often - Go Global in minutes - Use serverless architectures
- Question #75Introduction to Cloud Security Concepts
The ability to support development and run workloads effectively is commonly called:
Operational ExcellenceFive Pillarscloud frameworkworkload management - Question #76Introduction to Cloud Security Concepts
The framework for cloud security consists of five basic components, or pillars Making small, reversible changes is a design principle of which of these five pillars?
Operational ExcellenceFive Pillarsdesign principlesreversible changes - Question #77Introduction to Cloud Security Concepts
The Administrators ability to protect data, systems, and assets While taking advantage of cloud technologies is commonly called
Security pillarFive Pillarsdata protectionasset protection - Question #78Introduction to Cloud Security Concepts
What is Operational Excellence?
Operational ExcellenceFive Pillarscloud frameworkworkload development - Question #79Introduction to Cloud Security Concepts
What is Reliability according to the Five Pillars?
ReliabilityFive Pillarsworkload consistencycloud framework - Question #80
Which is not a Pillar of the Framework for the Cloud?
- Question #81
When choosing PAYG (Pay As You Go) licensing in AWS, it is provided:
- Question #82
Which solution delivers a software platform for public cloud security and compliance orchestration?
- Question #83Cloud Security Policy Management
Which language can be used by users of Cloud Security Posture Management to create custom Security Policies?
CSPMGSLGovernance Specific Languagecustom security policies - Question #84CloudGuard Architecture and Deployment
When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?
Data Center ObjectsCloudGuard Controllerpolicy synctroubleshooting - Question #85CloudGuard Architecture and Deployment
Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?
CloudGuard Controllerlog filesdiagnosticstroubleshooting - Question #86CloudGuard Architecture and Deployment
Which hub serves as the front end of the Workload that permits inbound web communications such as HTTP traffic from the Internet to reach spoke Workloads?
Northbound Hubworkload trafficinbound web traffichub architecture - Question #87CloudGuard Architecture and Deployment
What are the languages supported for Cloud Templates?
Cloud TemplatesJSONYAMLinfrastructure as code - Question #88Cloud Security Best Practices and Compliance
One of the five pillars of the framework for cloud security is 'Performance Efficiency'. The design principles of Performance Efficiency include:
cloud framework pillarsPerformance Efficiencydesign principlescloud best practices - Question #89Cloud Security Best Practices and Compliance
What is Cost Optimization?
Cost Optimizationcloud framework pillarswell-architected frameworkcloud economics - Question #90
Which is not a cloud component?
- Question #91Cloud Security Best Practices and Compliance
What is Performance Efficiency?
Performance Efficiencycloud framework pillarswell-architected frameworkresource efficiency - Question #92
What is Cloud Security according to the Five Pillars?
- Question #93Introduction to Cloud Security Concepts
In a CloudGuard deployment, what does the acronym IAM stand for?
IAMIdentity and Access Managementcloud terminologyaccess control - Question #94Security for Public Clouds (AWS, Azure, GCP)
Which cloud components specify the Workloads associated with traffic and tell load balancers which Workloads are members of the same group?
Target Groupsload balancingworkload groupingcloud networking - Question #95
Which pricing model gives administrators the ability to deploy devices as needed without the need to purchase blocks of vCore licenses?
- Question #96CloudGuard Architecture and Deployment
The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________
SDDCCloudGuard integrationSecurity Management Serversecure connection - Question #97Introduction to Cloud Security Concepts
What is vertical scaling?
vertical scalingresource scalingcloud scalabilitycapacity management - Question #98Monitoring and Logging in Cloud Environments
Which software blade provides forensic analysis tools?
SmartEventforensic analysissoftware bladeslogging - Question #99Cloud Security Policy Management
Which of these is an example of Control Connections as accepted with implicit rules enabled from Global Properties?
implicit rulesGlobal Propertiescontrol connectionssecurity policy - Question #100Cloud Threat Prevention
What tool can prevent intruders from using altered packet IP Addresses to gain access to internal network resources?
anti-spoofingIP spoofingnetwork securitypacket filtering