156-560 Online Practice Questions and Answers

Cloud Security Posture Management uses CloudBots to assist with________________.

A. cloud account configurations and data flows

B. securing IAM account credentials.

C. identifying where the organization's security posture need:

D. automatic compliance remediation

The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.

A. All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

B. A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

C. All traffic that enters and exits each spoke must travel through a hub

D. The Hub and Spoke model is applicable ONLY to multi-cloud environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

Cloud Security Posture Management operational modes for cloud accounts are:

A. Read Only, Full Protection. Region Lock

B. Read Only, Read/Write. Region Lock

C. Read Only, Read/Write. Full Protection

D. Read/Write, Partial Protection, Full Protection

One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that:

A. State synchronization is required and must be done ONLY on a dedicated link

B. High Availability configurations support only two Security Gateway Members

C. High Availability configurations support only three Security Gateway members

D. VMAC mode is mandatory for all cluster interfaces

What is vertical scaling?

A. Tunes the environment up and down according to the resource capacity needs

B. Tunes the environment by automatically adding or removing resource to the SDN

C. Tunes the environment by manually adding or removing resource to an SDDC

D. Scaling method that does not require a system shutdown to add or remove resources.

What is Reliability according to the Five Pillars?

A. The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve

B. The ability of a Workload to function correctly and consistently in all expected.

C. The ability to support development and run workload effectively

D. In terms of the cloud, security is about architecting every workload to prevent.

Which solution delivers a software platform for public cloud security and compliance orchestration?

A. CloudGuard Network Public

B. CloudGuard Network Private

C. CloudGuard SaaS

D. Cloud Security Posture Management

Which Pillar includes the following principals

?Experiment more often ?Go Global in minutes

?Use serverless architectures

A. Reliability

B. Cost Optimization

C. Performance Efficiency

D. Operational Excellence

REST is an acronym for the following

A. Representation of Security Traffic

B. Really Efficient Security Template

C. Representational State Transfer

D. Real Security Threat

Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?

A. $CPDIR/logs/cloud.elg

B. $DADIR/logs/controller_proxy.elg

C. $FWDIR/logs/cloud_controller.elg

D. $FWDIR/logs/cloud_proxy.elg