156-561 Exam Questions
131 real 156-561 exam questions with expert-verified answers and explanations. Page 2 of 3.
- Question #51CloudGuard Network Security in AWS
Which software blades (Check Point features) are not supported in AWS?
CloudGuard AWSCheck Point BladesMobile Access/SSLVPNFeature Support Limitations - Question #52Introduction to Check Point Cloud Security
How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?
Micro-segmentationNetwork BoundariesCloudGuardPerimeter Protection - Question #53CloudGuard Network Security in Microsoft Azure
On Azure, can you deploy a Check Point Standalone installation (Management + GW)?
Azure DeploymentStandalone InstallationDeployment MethodsCloudGuard Network Security - Question #54CloudGuard Network Security in AWS
How many AWS Internet gateways can you define in AWS?
AWS Internet GatewayVPC networkingAWS limitsnetwork infrastructure - Question #55CloudGuard Network Security in Microsoft Azure
How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?
CloudGuard AzureBYOL licensingvCoreAzure licensing models - Question #56CloudGuard Network Security in AWS
Can you configure NAT for internal VM's on the Check Point Gateway in AWS?
NAT configurationAWS CloudGuardCheck Point GatewayPublic IP assignment - Question #57Introduction to Check Point Cloud Security
What is the CloudGuard solution?
CloudGuardcloud securitypublic cloudprivate cloud - Question #58CloudGuard Network Security in Microsoft Azure
When using system routes and user defined routes in Azure, which takes precedent?
Azure routingRoute precedenceLongest prefix matchNetwork configuration - Question #59Introduction to Check Point Cloud Security
Which is not a responsibility of the Customer?
shared responsibility modelinfrastructure patchingcloud securitycustomer duties - Question #60Introduction to Check Point Cloud Security
What is the primary difference between Vertical and Horizontal autoscaling?
vertical scalinghorizontal scalingauto-scalingVM lifecycle - Question #61Introduction to Check Point Cloud Security
What part of the Secure Public Cloud Blueprint may be housed in on-premises equipment?
SMSon-premiseshybrid deploymentsecurity management - Question #62Cloud Security Policy and Management
Which utility allows integration between the Check Point Security Management Server, the CloudGuard Network solution, and the CSPs?
CMECloudGuard Management ExtensionSMSCSP integration - Question #63Introduction to Check Point Cloud Security
Security Management Servers deployed in a cloud environment can manage which of the following gateways?
Security Management Server (SMS)CloudGuard IaaSMulti-Cloud ManagementHybrid Cloud Security - Question #64Cloud Security Policy and Management
Automated Security Policy enforcement requires coordinated effort between the Security Management Server, the Security Gateway and:
automated policy enforcementCloudGuard ControllerSecurity Management Serversecurity gateway - Question #65Introduction to Check Point Cloud Security
How many gateways are supported in a High Availability solution?
high availabilityHA clustergateway redundancy - Question #66CloudGuard Workload Protection
What do Workloads require to automate processes?
workload automationAPIcloud workloadsprocess automation - Question #67Cloud Security Policy and Management
Clouds use orchestration platforms to accomplish various deployment tasks. Which of the following is NOT one of those tasks?
Cloud OrchestrationDeployment TasksEndpoint SecurityInfrastructure Management - Question #68Cloud Security Policy and Management
What is a Security Zone?
security zonesnetwork interfacescentrally managed securityzone definition - Question #69CloudGuard Network Security in AWS
In Amazon Web Services, what is the level of segmentation you can achieve?
AWS VPCNetwork SegmentationCloud SecurityAWS Architecture - Question #70CloudGuard Network Security in Microsoft Azure
Can you change the Check Point prepared solution templates for Azure to fit your needs?
solution templatesAzure deploymenttemplate customizationCloudGuard - Question #71CloudGuard Network Security in Microsoft Azure
On Azure, can you deploy a Check Point Standalone installation (Management + GW)?
Azure deploymentStandalone installationCloudGuard setupdeployment methods - Question #72Introduction to Check Point Cloud Security
Which of the following is the Customer's Responsibility in the shared responsibility model used in the cloud?
shared responsibility modelcustomer responsibilitiescloud security governance - Question #73Introduction to Check Point Cloud Security
Which of the following is a common limitation of cloud platforms?
cloud platform limitationspacket forwardingnetwork securitycloud networking - Question #74CloudGuard Network Security in AWS
Which Pillar includes the following principals? - Experiment more often - Go Global in minutes - Use serverless architectures
AWS Well-Architected FrameworkPerformance Efficiency PillarCloud Architecture PrinciplesServerless Architecture - Question #75Introduction to Check Point Cloud Security
The ability to support development and run workloads effectively is commonly called:
Operational Excellencefive pillarscloud frameworkworkload support - Question #76Introduction to Check Point Cloud Security
The framework for cloud security consists of five basic components, or pillars Making small, reversible changes is a design principle of which of these five pillars?
Operational Excellencedesign principlesreversible changesfive pillars - Question #77Introduction to Check Point Cloud Security
The Administrators ability to protect data, systems, and assets While taking advantage of cloud technologies is commonly called
security pillarfive pillarsdata protectioncloud technologies - Question #78Introduction to Check Point Cloud Security
What is Operational Excellence?
Operational Excellencefive pillarsworkload developmentcloud framework - Question #79Introduction to Check Point Cloud Security
What is Reliability according to the Five Pillars?
Reliabilityfive pillarsworkload consistencycloud framework - Question #80Introduction to Check Point Cloud Security
Which is not a Pillar of the Framework for the Cloud?
Cloud Framework PillarsAWS Well-ArchitectedFramework KnowledgeCloud Architecture - Question #81CloudGuard Network Security in AWS
When choosing PAYG (Pay As You Go) licensing in AWS, it is provided:
AWS MarketplacePAYG licensingCloudGuard AWSLicensing models - Question #82CloudGuard Posture Management (CSPM)
Which solution delivers a software platform for public cloud security and compliance orchestration?
CSPMCloud ComplianceSecurity PosturePublic Cloud - Question #83CloudGuard Posture Management (CSPM)
Which language can be used by users of Cloud Security Posture Management to create custom Security Policies?
GSLGovernance Specific Languagecustom security policiesCSPM - Question #84Troubleshooting and Optimization
When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?
Data Center ObjectstroubleshootingCloudGuard processpolicy update - Question #85Troubleshooting and Optimization
Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?
log filesCloudGuard Controllerdiagnosticstroubleshooting - Question #86CloudGuard Workload Protection
Which hub serves as the front end of the Workload that permits inbound web communications such as HTTP traffic from the Internet to reach spoke Workloads?
Northbound Hubhub-spoke topologyinbound trafficHTTP traffic - Question #87Cloud Security Policy and Management
What are the languages supported for Cloud Templates?
cloud templatesJSONYAMLinfrastructure as code - Question #88Introduction to Check Point Cloud Security
One of the five pillars of the framework for cloud security is 'Performance Efficiency'. The design principles of Performance Efficiency include:
Performance Efficiencydesign principlesfive pillarsglobal deployment - Question #89Introduction to Check Point Cloud Security
What is Cost Optimization?
Cost Optimizationfive pillarsbusiness valuecloud cost management - Question #90Introduction to Check Point Cloud Security
Which is not a cloud component?
Cloud ComponentsCloud InfrastructureNetwork ConceptsCloud Fundamentals - Question #91Introduction to Check Point Cloud Security
What is Performance Efficiency?
Performance Efficiencyfive pillarscloud resourcessystem requirements - Question #92Introduction to Check Point Cloud Security
What is Cloud Security according to the Five Pillars?
Cloud SecurityFive Pillars FrameworkWorkload ArchitectureThreat Prevention - Question #93Introduction to Check Point Cloud Security
In a CloudGuard deployment, what does the acronym IAM stand for?
IAMIdentity and Access Managementcloud securityacronym - Question #94CloudGuard Network Security in AWS
Which cloud components specify the Workloads associated with traffic and tell load balancers which Workloads are members of the same group?
target groupsload balancersworkload groupingAWS networking - Question #95Introduction to Check Point Cloud Security
Which pricing model gives administrators the ability to deploy devices as needed without the need to purchase blocks of vCore licenses?
Pricing ModelsPay As You GovCore LicensingCloudGuard Deployment - Question #96Cloud Security Policy and Management
The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________
SDDCSecurity Management Servercloud integrationsecure connection - Question #97Introduction to Check Point Cloud Security
What is vertical scaling?
vertical scalingresource capacitycloud scalingworkload tuning - Question #98Troubleshooting and Optimization
Which software blade provides forensic analysis tools?
SmartEventforensic analysissoftware bladeslogging - Question #99Cloud Security Policy and Management
Which of these is an example of Control Connections as accepted with implicit rules enabled from Global Properties?
implicit rulesGlobal Propertiescontrol connectionsfirewall policy - Question #100CloudGuard Network Security in AWS
What tool can prevent intruders from using altered packet IP Addresses to gain access to internal network resources?
anti-spoofingIP spoofingnetwork securityaccess control