156-561 Exam Questions
131 real 156-561 exam questions with expert-verified answers and explanations. Page 2 of 3.
- Question #51CloudGuard Network Security in AWS
Which software blades (Check Point features) are not supported in AWS?
CloudGuard AWSCheck Point BladesMobile Access/SSLVPNFeature Support Limitations - Question #52Introduction to Check Point Cloud Security
How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?
Micro-segmentationNetwork BoundariesCloudGuardPerimeter Protection - Question #53CloudGuard Network Security in Microsoft Azure
On Azure, can you deploy a Check Point Standalone installation (Management + GW)?
Azure DeploymentStandalone InstallationDeployment MethodsCloudGuard Network Security - Question #54CloudGuard Network Security in AWS
How many AWS Internet gateways can you define in AWS?
AWS Internet GatewayVPC networkingAWS limitsnetwork infrastructure - Question #55CloudGuard Network Security in Microsoft Azure
How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?
CloudGuard AzureBYOL licensingvCoreAzure licensing models - Question #56CloudGuard Network Security in AWS
Can you configure NAT for internal VM's on the Check Point Gateway in AWS?
NAT configurationAWS CloudGuardCheck Point GatewayPublic IP assignment - Question #57Introduction to Check Point Cloud Security
What is the CloudGuard solution?
CloudGuardcloud securitypublic cloudprivate cloud - Question #58CloudGuard Network Security in Microsoft Azure
When using system routes and user defined routes in Azure, which takes precedent?
Azure routingRoute precedenceLongest prefix matchNetwork configuration - Question #59
Which is not a responsibility of the Customer?
- Question #60
What is the primary difference between Vertical and Horizontal autoscaling?
- Question #61
What part of the Secure Public Cloud Blueprint may be housed in on-premises equipment?
- Question #62
Which utility allows integration between the Check Point Security Management Server, the CloudGuard Network solution, and the CSPs?
- Question #63Introduction to Check Point Cloud Security
Security Management Servers deployed in a cloud environment can manage which of the following gateways?
Security Management Server (SMS)CloudGuard IaaSMulti-Cloud ManagementHybrid Cloud Security - Question #64
Automated Security Policy enforcement requires coordinated effort between the Security Management Server, the Security Gateway and:
- Question #65
How many gateways are supported in a High Availability solution?
- Question #66
What do Workloads require to automate processes?
- Question #67Cloud Security Policy and Management
Clouds use orchestration platforms to accomplish various deployment tasks. Which of the following is NOT one of those tasks?
Cloud OrchestrationDeployment TasksEndpoint SecurityInfrastructure Management - Question #68
What is a Security Zone?
- Question #69CloudGuard Network Security in AWS
In Amazon Web Services, what is the level of segmentation you can achieve?
AWS VPCNetwork SegmentationCloud SecurityAWS Architecture - Question #70CloudGuard Network Security in Microsoft Azure
Can you change the Check Point prepared solution templates for Azure to fit your needs?
solution templatesAzure deploymenttemplate customizationCloudGuard - Question #71CloudGuard Network Security in Microsoft Azure
On Azure, can you deploy a Check Point Standalone installation (Management + GW)?
Azure deploymentStandalone installationCloudGuard setupdeployment methods - Question #72
Which of the following is the Customer's Responsibility in the shared responsibility model used in the cloud?
- Question #73Introduction to Check Point Cloud Security
Which of the following is a common limitation of cloud platforms?
cloud platform limitationspacket forwardingnetwork securitycloud networking - Question #74CloudGuard Network Security in AWS
Which Pillar includes the following principals? - Experiment more often - Go Global in minutes - Use serverless architectures
AWS Well-Architected FrameworkPerformance Efficiency PillarCloud Architecture PrinciplesServerless Architecture - Question #75
The ability to support development and run workloads effectively is commonly called:
- Question #76
The framework for cloud security consists of five basic components, or pillars Making small, reversible changes is a design principle of which of these five pillars?
- Question #77
The Administrators ability to protect data, systems, and assets While taking advantage of cloud technologies is commonly called
- Question #78
What is Operational Excellence?
- Question #79
What is Reliability according to the Five Pillars?
- Question #80Introduction to Check Point Cloud Security
Which is not a Pillar of the Framework for the Cloud?
Cloud Framework PillarsAWS Well-ArchitectedFramework KnowledgeCloud Architecture - Question #81CloudGuard Network Security in AWS
When choosing PAYG (Pay As You Go) licensing in AWS, it is provided:
AWS MarketplacePAYG licensingCloudGuard AWSLicensing models - Question #82CloudGuard Posture Management (CSPM)
Which solution delivers a software platform for public cloud security and compliance orchestration?
CSPMCloud ComplianceSecurity PosturePublic Cloud - Question #83
Which language can be used by users of Cloud Security Posture Management to create custom Security Policies?
- Question #84
When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?
- Question #85
Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?
- Question #86
Which hub serves as the front end of the Workload that permits inbound web communications such as HTTP traffic from the Internet to reach spoke Workloads?
- Question #87
What are the languages supported for Cloud Templates?
- Question #88
One of the five pillars of the framework for cloud security is 'Performance Efficiency'. The design principles of Performance Efficiency include:
- Question #89
What is Cost Optimization?
- Question #90Introduction to Check Point Cloud Security
Which is not a cloud component?
Cloud ComponentsCloud InfrastructureNetwork ConceptsCloud Fundamentals - Question #91
What is Performance Efficiency?
- Question #92Introduction to Check Point Cloud Security
What is Cloud Security according to the Five Pillars?
Cloud SecurityFive Pillars FrameworkWorkload ArchitectureThreat Prevention - Question #93
In a CloudGuard deployment, what does the acronym IAM stand for?
- Question #94
Which cloud components specify the Workloads associated with traffic and tell load balancers which Workloads are members of the same group?
- Question #95Introduction to Check Point Cloud Security
Which pricing model gives administrators the ability to deploy devices as needed without the need to purchase blocks of vCore licenses?
Pricing ModelsPay As You GovCore LicensingCloudGuard Deployment - Question #96
The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________
- Question #97
What is vertical scaling?
- Question #98
Which software blade provides forensic analysis tools?
- Question #99
Which of these is an example of Control Connections as accepted with implicit rules enabled from Global Properties?
- Question #100
What tool can prevent intruders from using altered packet IP Addresses to gain access to internal network resources?