Check Point Certified Cloud Specialist 156-560 Dumps Questions

test2022-09-02T06:14:09+00:00

Download the latest Free Check Point Certified Cloud Specialist 156-560 Dumps Questions for your best preparation, it is is one of the hot certification exams that will help you become a Check Point Certified Cloud Specialist. FreeTestShare 156-560 Dumps Questions are designed for candidates who want to get the Check Point Certified Cloud Specialist (CCCS) certification. With real and authentic 156-560 Dumps Questions, you can pass the Check Point 156-560 exam in the first try to enhance your IT career.

You may now access your knowledge by taking this free 156-560 practice test.

Page 1 of 2

1. Which Security Gateway function inspects cloud applications and workload resources for malicious activity?

Application Control

Threat Prevention

Identity Awareness

Access Control

2. Introduction to Cloud Security Posture Management uses which of the following to connect, communicate, and collect information from cloud accounts and third party tools?

SmartConsole

HTML

CLI

APIs

3. Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back .

What could be the probable cause of this failure and roll back?

The Security Management Server that will be managing the Security Gateway had a lower version

The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions

The template used was for some cloud platform other than AWS

The web browser used to run the template was not compatible

4. Where can I find solution templates for Azure?

On the market place

In a search on the Internet

At the relevant SK

In a special Azure page

5. A utility that allows integration between SMS, the CloudGuard Network Solution, and CSPs, allowing the SMS to monitor and control scaling solutions in their associated cloud environments is called

CloudGuard Management Extension (CME)

CloudGuard Controller and Enforcer (CCE)

CloudGuard Scanner and Enforcer (CSE)

CloudGuard Controller (CC)

6. To travel between spokes, non-transitive traffic uses ________ to allow Ipv4 and IPv6 traffic

to reach a spoke network

a VTI

the Northbound hub

the Southbound hub

Peering

7. Where are the api logs found on the Security Management Server?

$FWDIR/Iog/api.elg

/var/tmp/api.elg

/var/log/api.elg

/opt/log/api.elg

8. On Azure, can you deploy a Check Point Standalone installation (Management + GW)?

No. it is not supported

Yes, via GitHub only

Yes. via PowerShell only

Yes, via solution template / PowerShell / Marketplace

9. Which pricing model gives administrators the ability to deploy devices as needed without the

need to purchase blocks of vCore licenses?

Pay As You Go

Bring Your Own License

Central licensing

Local licensing

10. Which of the following is the Customer's Responsibility in the shared responsibility model used in the cloud?

Customer Employee Training

Infrastructure Patching

Physical and Environment Controls

Infrastructure Configuration

Page 2 of 2

11. Cloud Security Posture Management uses which of the following to integrate with cloud accounts?

IAM account credentials

Security Objects

SDDC

CloudGuard Controller

12. The framework for cloud security consists of five basic components, or pillars Making small, reversible changes is a design principle of which of these five pillars

Reliability

Performance Efficiency

Cost Optimization

Operational Excellence

13. In a CloudGuard deployment, what does the acronym IAM stand for?

Information and Adaptability Measures

IP Address Management

Identity and Access Management

Instant Access Management

14. Which Pillar includes the following principals

- Experiment more often

- Go Global in minutes-

- Use serverless architectures

Reliability

Cost Optimization

Performance Efficiency

Operational Excellence

15. Which function do Load Balancers perform?

Trigger capacity on security gateways

To secure balance between private and public cloud

Direct internet traffic to spoke networks

Restrict traffic loads between servers

16. Which of these Cloud Platforms support User Defined Route (UDR) to force traffic destined for spoke networks to go through a network virtual appliance

Amazon AWS

Google Cloud Platform

Amazon AWS and Google Cloud Platform

Microsoft Azure

17. Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?

Minimizes the risk of external threats by blocking access to highrisk sites and external users

Minimizes the risk of external threats by blocking accessed to the internet

Minimizes the risk of external threats by blocking access to all internal resources

Minimizes the risks of external threats by blocking access to services and ports

18. The Security Administrator needs to reconfigure the API server, which command would need to be ran?

api reboot

api reconf

api restart

api reconfig

19. An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules.

When the cloud resource represented by this object changes it's IP address, how will the change be effected on the Security Gateway

If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on

With a property functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator

The Data Center Object needs to be refreshed in the SmartCansoIe and then a policy install will be required

The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required