156-561 Exam Questions
131 real 156-561 exam questions with expert-verified answers and explanations. Page 1 of 3.
- Question #1Cloud Security Policy and Management
Adaptive Security Policies allow the deployment of new cloud based resources without
Adaptive Security PoliciesCloud resource deploymentPolicy automationCloudGuard management - Question #2Introduction to Check Point Cloud Security
Adding new Security Gateways as system load increases is an example of __________
horizontal scalingauto-scalingsecurity gatewayscloud scalability - Question #3CloudGuard Workload Protection
Which autoscaling method requires the VM to temporarily shut down while it processes system modification?
Vertical ScalingHorizontal ScalingVM AutoscalingCloud Infrastructure - Question #4Introduction to Check Point Cloud Security
Which function do Load Balancers perform?
load balancingtraffic distributioncloud networking - Question #5Cloud Security Policy and Management
A utility that allows integration between SMS, the CloudGuard Network Solution, and CSPs, allowing the SMS to monitor and control scaling solutions in their associated cloud enviro...
CMECloudGuard Management ExtensionSMS integrationCSP integration - Question #6Cloud Security Policy and Management
CloudGuard uses several management tools to create and manage Security Policies. Which is NOT one of those tools?
CloudGuard management toolsSecurity policy managementSmartConsole and CLIPolicy administration - Question #7CloudGuard Workload Protection
Which Security Gateway function inspects cloud applications and workload resources for malicious activity?
Threat PreventionSecurity GatewayCloud WorkloadsMalware Detection - Question #8CloudGuard Network Security in Microsoft Azure
Which of these Cloud Platforms support User Defined Route (UDR) to force traffic destined for spoke networks to go through a network virtual appliance?
user-defined routesAzurenetwork virtual appliancetraffic steering - Question #9Introduction to Check Point Cloud Security
The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.
hub and spokenetwork topologytraffic routingcloud architecture - Question #10Introduction to Check Point Cloud Security
Check Point's Public Cloud model is described as the following
hub and spoke modelCheck Point architecturepublic cloud - Question #11Introduction to Check Point Cloud Security
Which is not a deployment method for CloudGuard solutions using CSP resources?
CloudGuard deploymentdeployment methodsCSP resourcescloud provisioning - Question #12CloudGuard Network Security in Microsoft Azure
What is an alternative method to double NAT in Azure?
User Defined RoutesDouble NATAzure RoutingNetwork Security - Question #13Introduction to Check Point Cloud Security
To travel between spokes, non-transitive traffic uses ________ to allow IPv4 and IPv6 traffic to reach a spoke network
VNet peeringspoke networksnon-transitive routingIPv4 IPv6 - Question #14Cloud Security Policy and Management
One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that:
CloudGuard High AvailabilitySecurity Gateway ClusterCluster ConfigurationHA Limitations - Question #15Introduction to Check Point Cloud Security
Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on-premises equipment, scripts, orchestration playbooks and CloudGuard N...
REST APIsCloud integrationHybrid cloudAPI architecture - Question #16Introduction to Check Point Cloud Security
Which scripting language is used by CloudGuard to develop templates that automate Security Gateway deployments?
CloudGuard templatesSecurity Gateway deploymentJSON automationInfrastructure as Code - Question #17Cloud Security Policy and Management
REST is an acronym for the following
REST APIrepresentational state transferAPI integration - Question #18Cloud Security Policy and Management
Which one of the following is part of the Orchestration Playbook process for creating a new spoke and an automated Security Gateway?
Orchestration PlaybookVPN ConfigurationSecurity Gateway DeploymentSpoke Creation - Question #19Introduction to Check Point Cloud Security
What are the Automation tools?
Automation ToolsInfrastructure as CodeAPI/CLIDevOps - Question #20Cloud Security Policy and Management
Which of these is true of the CloudGuard Controller?
CloudGuard ControllerCloud visibilityEnvironment monitoringCloud management - Question #21Cloud Security Policy and Management
What does the Adaptive Security Policy involve to import the Data Center Objects?
adaptive security policydata center objectsCloudGuard Controllerdynamic objects - Question #22Cloud Security Policy and Management
Logging Implied rules, enabling Hit Count and defining advanced VPN functions are all settings that are applied as
global propertiessecurity policyimplied ruleshit count - Question #23Cloud Security Policy and Management
What are two basic rules Check Point recommends for building an effective policy?
cleanup rulestealth rulesecurity policybest practices - Question #24Cloud Security Policy and Management
What is the key component in securing and managing any environment?
Security PolicySecurity ManagementCloud Security ArchitecturePolicy Framework - Question #25Introduction to Check Point Cloud Security
What can Data Center Objects represent?
Data Center ObjectsCloud Infrastructure ResourcesCloudGuard ConfigurationNetwork and Host Management - Question #26Cloud Security Policy and Management
An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it's...
adaptive security policydynamic IPCloudGuard Controllerautomatic update - Question #27Troubleshooting and Optimization
What can a Security Admin do in a situation where collecting additional log file information to examine a CloudGuard Controller issue is required?
CloudGuard troubleshootingLog collectionTRACE modeDiagnostics - Question #28CloudGuard Network Security in AWS
Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What...
CloudFormationAWS MarketplaceCloudGuard GatewayDeployment Prerequisites - Question #29Troubleshooting and Optimization
To troubleshoot CloudGuard Controller, administrators can execute the following command:
CloudGuard ControllerTroubleshootingCLI CommandsDiagnostics - Question #30Troubleshooting and Optimization
Where are the api logs found on the Security Management Server?
Security Management ServerAPI logslog file pathstroubleshooting - Question #31Introduction to Check Point Cloud Security
Which command will enable the CloudGuard Controller services on the Security Management Server?
CloudGuard ControllerService ManagementCLI CommandsSecurity Management Server - Question #32Troubleshooting and Optimization
The Security Administrator needs to reconfigure the API server, which command would need to be ran?
API serverCLI commandsmanagement serverreconfiguration - Question #33CloudGuard Posture Management (CSPM)
How does the Cloud Security Posture Management (CSPM) service deliver intelligence threat feeds, enforce compliance policies, and apply security enhancements to the environment?
CSPM architectureREST API protocolthreat intelligence deliverycompliance enforcement - Question #34CloudGuard Posture Management (CSPM)
Cloud Security Posture Management uses CloudBots to assist with________________.
CloudBotsCompliance RemediationCSPMAutomated Response - Question #35CloudGuard Posture Management (CSPM)
Which CloudGuard security platform enables organizations to view and access their security posture, find cloud misconfigurations, and enforce best practices?
Security Posture ManagementCloud Misconfiguration DetectionCompliance EnforcementSecurity Visibility - Question #36CloudGuard Posture Management (CSPM)
When Cloud Security Posture Management discovers non-compliant cloud resources, CloudBot applications perform automated remediation's to correct any violations. How true is this st...
CSPMCloudBot RemediationCloud Account AccessCompliance - Question #37CloudGuard Posture Management (CSPM)
Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?
CSPM default postureNetwork security hardeningService/port restrictionsPost-deployment configuration - Question #38CloudGuard Posture Management (CSPM)
Introduction to Cloud Security Posture Management uses which of the following to connect, communicate, and collect information from cloud accounts and third party tools?
CSPM APIsCloud integrationAPI connectivityData collection - Question #39CloudGuard Posture Management (CSPM)
Cloud Security Posture Management (CSPM) operates as which type of service based platform?
CSPMcloud service modelsposture managementSaaS IaaS - Question #40CloudGuard Posture Management (CSPM)
What platform provides continuous compliance and governance assessments that evaluate public infrastructure according to industry to industry standards and best practices?
Cloud ComplianceCSPMGovernance AssessmentInfrastructure Posture - Question #41CloudGuard Posture Management (CSPM)
After the cloud acquisition process finishes, Cloud Security Posture Management may begin to manage network security protections. The Network Security module secures access to clou...
Cloud Security Posture ManagementNetwork Security GroupsCloud Access ControlDynamic Access Leases - Question #42CloudGuard Posture Management (CSPM)
Cloud Security Posture Management uses which one of the following to integrate with cloud accounts?
CSPM integrationIAM credentialsCloud account authenticationCloudGuard configuration - Question #43CloudGuard Posture Management (CSPM)
Cloud Security Posture Management operational modes for cloud accounts are:
CSPM Operational ModesAccess ControlCloud Account ConfigurationSecurity Posture - Question #44CloudGuard Network Security in Microsoft Azure
Where can I find solution templates for Azure?
Azuresolution templatesCloudGuarddeployment resources - Question #45CloudGuard Network Security in Microsoft Azure
How is CloudGuard for Azure licensed in PAYG (Pay As You Go) mode?
CloudGuard Azure licensingPAYG billing modelAzure resource meteringcost management - Question #46CloudGuard Network Security in Microsoft Azure
Can you configure Micro segmentation (control traffic inside a subnet) on Azure?
Micro-segmentationAzure vNetNetwork routingTraffic control - Question #47CloudGuard Network Security in AWS
According to best practices what would be the best way to install a Check Point cluster on AWS?
Check Point ClusterAWS DeploymentCloudGuardAWS Marketplace - Question #48CloudGuard Network Security in AWS
Why is an IAM role created when installing a cluster on AWS?
IAM RolesAWS Cluster SetupCloudGuardAuditing - Question #49Introduction to Check Point Cloud Security
Which security principles are indicative of the CloudGuard Secure Public Cloud Blueprint architecture?
CloudGuard Blueprint ArchitectureAdvanced Threat PreventionNetwork DivisionCloud Security Automation - Question #50Introduction to Check Point Cloud Security
What is public cloud?
public cloudcloud deploymentcloud infrastructurecloud computing basics