CheckPoint Checkpoint Certifications 156-560 Questions & Answers

• Question 11:

  Cloud Security Posture Management uses CloudBots to assist with________________.

  A. cloud account configurations and data flows

  B. securing IAM account credentials.

  C. identifying where the organization's security posture need:

  D. automatic compliance remediation

  Correct Answer: D

• Question 12:

  Which scripting language is used by CloudGuard to develop templates that automate Security Gateway deployments?

  A. Perl

  B. C++

  C. JSON

  D. Python

  Correct Answer: C

• Question 13:

  On Azure, can you deploy a Check Point Standalone installation (Management + GW)?

  A. No. it is not supported

  B. Yes, via GitHub only

  C. Yes. via PowerShell only

  D. Yes, via solution template / PowerShell / Marketplace

  Correct Answer: D

• Question 14:

  Which of these is true of the CloudGuard Controller?

  A. CloudGuard Controller manually updates SmartConsole security tads and API connections

  B. CloudGuard Controller only displays cloud-based Security Gateway objects

  C. CloudGuard Controller maintains visibility of the protected cloud environment

  D. CoudGuard Control statically .denies Cloud resources created within a single cloud or a multi-cloud environment.

  Correct Answer: D

• Question 15:

  In a CloudGuard deployment, what does the acronym IAM stand for?

  A. Information and Adaptability Measures

  B. IP Address Management

  C. Identity and Access Management

  D. Instant Access Management

  Correct Answer: C

• Question 16:

  The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.

  A. All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

  B. A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

  C. All traffic that enters and exits each spoke must travel through a hub

  D. The Hub and Spoke model is applicable ONLY to multi-cloud environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

  Correct Answer: A

• Question 17:

  Which hub serves as the front end of the Workload that permits inbound web communications such as HTTP traffic from the Internet to reach spoke Workloads?

  A. Web Hub

  B. Southbound Hub

  C. East-West Hub

  D. Northbound Hub

  Correct Answer: D

  ttps://www.checkpoint.com/downloads/products/check-point-secure-cloud-blueprint-azure-whitepaper.pdf p.6

• Question 18:

  When Cloud Security Posture Management discovers non- compliant cloud resources, CloudBot applications perform automated remediation's to correct any violations. How true is this statement?

  A. This is true, however it requires Full Protection access to the Cloud Account to perform automated remediation

  B. This is not true, Cloud Security Posture Management (CSPIU) can only report non- compliance and cannot remediate by itself

  C. This is partially true, however the automated remediation is not done by CloudBot applications but it is done by the Security Management Server

  D. This is not true because CloudBot applications are used to provide chat service to respond to non-compliance alerts

  Correct Answer: A

• Question 19:

  Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?

  A. The Security Management Server that will be managing the Security Gateway had a lower version

  B. The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions

  C. The template used was for some cloud platform other than AWS

  D. The web browser used to run the template was not compatible

  Correct Answer: C

• Question 20:

  An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it's IP address, how will the change be effected on the Security Gateway

  A. If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on

  B. With a property functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator

  C. The Data Center Object needs to be refreshed in the SmartCansoIe and then a policy install will be required

  D. The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required

  Correct Answer: B