156-560 Exam Questions

Which software blades (Check Point features) are not supported in AWS?

How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

On Azure, can you deploy a Check Point Standalone installation (Management + GW)?

How many AWS Internet gateways can you define in AWS?

How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?

Can you configure NAT for internal VM's on the Check Point Gateway in AWS?

What is the CloudGuard solution?

When using system routes and user defined routes in Azure, which takes precedent?

Which is not a responsibility of the Customer?

What is the primary difference between Vertical and Horizontal autoscaling?

What part of the Secure Public Cloud Blueprint may be housed in on-premises equipment?

Which utility allows integration between the Check Point Security Management Server, the CloudGuard Network solution, and the CSPs?

Security Management Servers deployed in a cloud environment can manage which of the following gateways?

Automated Security Policy enforcement requires coordinated effort between the Security Management Server, the Security Gateway and:

How many gateways are supported in a High Availability solution?

What do Workloads require to automate processes?

Clouds use orchestration platforms to accomplish various deployment tasks. Which of the following is NOT one of those tasks?

What is a Security Zone?

In Amazon Web Services, what is the level of segmentation you can achieve?

Can you change the Check Point prepared solution templates for Azure to fit your needs?

On Azure, can you deploy a Check Point Standalone installation (Management + GW)?

Which of the following is the Customer's Responsibility in the shared responsibility model used in the cloud?

Which of the following is a common limitation of cloud platforms?

Which Pillar includes the following principals? - Experiment more often - Go Global in minutes - Use serverless architectures

The ability to support development and run workloads effectively is commonly called:

The framework for cloud security consists of five basic components, or pillars Making small, reversible changes is a design principle of which of these five pillars?

The Administrators ability to protect data, systems, and assets While taking advantage of cloud technologies is commonly called

What is Operational Excellence?

What is Reliability according to the Five Pillars?

Which is not a Pillar of the Framework for the Cloud?

When choosing PAYG (Pay As You Go) licensing in AWS, it is provided:

Which solution delivers a software platform for public cloud security and compliance orchestration?

Which language can be used by users of Cloud Security Posture Management to create custom Security Policies?

When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?

Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?

Which hub serves as the front end of the Workload that permits inbound web communications such as HTTP traffic from the Internet to reach spoke Workloads?

What are the languages supported for Cloud Templates?

One of the five pillars of the framework for cloud security is 'Performance Efficiency'. The design principles of Performance Efficiency include:

What is Cost Optimization?

Which is not a cloud component?

What is Performance Efficiency?

What is Cloud Security according to the Five Pillars?

In a CloudGuard deployment, what does the acronym IAM stand for?

Which cloud components specify the Workloads associated with traffic and tell load balancers which Workloads are members of the same group?

Which pricing model gives administrators the ability to deploy devices as needed without the need to purchase blocks of vCore licenses?

The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________

What is vertical scaling?

Which software blade provides forensic analysis tools?

Which of these is an example of Control Connections as accepted with implicit rules enabled from Global Properties?

What tool can prevent intruders from using altered packet IP Addresses to gain access to internal network resources?