CheckPoint Checkpoint Certifications 156-560 Questions & Answers

• Question 1:

  Which is not a deployment method for CloudGuard solutions using

  A. Terraform

  B. Shell

  C. CLI

  D. CPS Portal

  Correct Answer: A

• Question 2:

  How does the Cloud Security Posture Management (CSPM) service deliver intelligence threat feeds, enforce compliance policies, and apply security enhancement to the environment.

  A. The Cloud Security Posture Management (CSPM) does this by using the SOAP protocol and XML

  B. The Cloud Security Posture Management (CSPM) does this by .usingSSH and microagents

  C. The Cloud Security Posture Management (CSPM) does this by using REST APIs

  D. The Cloud Security Posture Management (CSPM) does this by using SIC connections on the cloud

  Correct Answer: D

• Question 3:

  The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________

  A. The SDDC, CloudGuard Security Gateways, and the Security Management Server

  B. The SDDC and CloudGuard Security Gateways.

  C. The SDDC and the Security Management Server

  D. CloudGuard Security Gateways and the Security Management Server

  Correct Answer: A

• Question 4:

  How many AWS Internet gateways can you define in AWS?

  A. Two per VPC

  B. Unlimited

  C. One per VPC

  D. One per Region

  Correct Answer: C

• Question 5:

  Check Point's Public Cloud model is described as the following

  A. A Security Matrix Model

  B. A Hub and Spoke Model

  C. An Advanced Threat Tunnel Model

  D. A Borderless Model

  Correct Answer: B

  https://www.checkpoint.com/downloads/products/check-point-secure-cloud- blueprint-azure-whitepaper.pdf (p. 5)

• Question 6:

  How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?

  A. Per usage

  B. Per Socket

  C. Per vCore

  D. Per Gateway

  Correct Answer: C

• Question 7:

  One of the five pillars of the framework for cloud security is `Performance Efficiency'. The design principles of Performance Efficiency include:

  A. Automatically recover from failure Test recovery procedures

  B. Adopt a consumption model Measure overall efficiency

  C. Go Global in minutes Use serverless architectures

  D. Apply security at all layers Automate security best practices

  Correct Answer: C

  erformance Efficiency

  *

  The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand chandes and technologies evolve

  *

  Design Priniciples: > Democratize advanced technologies > Go Global in minutes > Use serverless architectures > Experiment ore often > Consider mechanical sympathy

• Question 8:

  When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?

  A. 1. Verify process is running with `cloudguard on' and

  2. restart the api process with `api restart'

  B. 1. Verify process is running with `cloudguard on' and

  2. `test communication' button the Data Center Server object

  C. 1. Reboot the Security Management Server and

  2. restart the cloudguard process with `cloudguard on'

  D. 1. Reboot the Security Management Server and

  2. restart the api process with `api restart'

  Correct Answer: B

• Question 9:

  Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?

  A. Minimizes the risk of external threats by blocking access to high risk sites and external users

  B. Minimizes the risk of external threats by blocking accessed to the internet

  C. Minimizes the risk of external threats by blocking access to all internal resources

  D. Minimizes the risks of external threats by blocking access to services and ports

  Correct Answer: D

• Question 10:

  Which of these Cloud Platforms support User Defined Route (UDR) to force traffic destined for spoke networks to go through a network virtual appliance

  A. Amazon AWS

  B. Google Cloud Platform

  C. Amazon AWS and Google Cloud Platform

  D. Microsoft Azure

  Correct Answer: D