CheckPoint Checkpoint Certifications 156-560 Questions & Answers

• Question 21:

  The ability to support development and run workloads effectively is commonly called:

  A. Performance Efficiency

  B. Cost Optimization

  C. Operational Excellence

  D. Reliability

  Correct Answer: C

  The Operational Excellence pillar includes the ability to support development and run workloads effectively, gain insight into their operations, and to continuously improve supporting processes and procedures to deliver business value.

• Question 22:

  Which of the following is the Customer's Responsibility in the shared responsibility model used in the cloud?

  A. Customer Employee Training

  B. Infrastructure Patching

  C. Physical and Environment Controls

  D. Infrastructure Configuration

  Correct Answer: A

  Customer Responsibilities: Customers are responsible for the data in their cloud (OS, updates, security patches, data integrity of their apps, encryption, assent classficiation, IAM > Guest OS and Application Patching and Configuration > Customer Emploeyee Training > Service, Communication and Data Security

• Question 23:

  Cloud Security Posture Management operational modes for cloud accounts are:

  A. Read Only, Full Protection. Region Lock

  B. Read Only, Read/Write. Region Lock

  C. Read Only, Read/Write. Full Protection

  D. Read/Write, Partial Protection, Full Protection

  Correct Answer: A

• Question 24:

  Which autoscaling method requires the VM to temporarily shut down while it processes system modification?

  A. Both Vertical and Horizontal Scaling

  B. Vertical Scaling

  C. Horizontal Scaling

  D. Neither autoscaling method requires the VM to}

  Correct Answer: B

• Question 25:

  Which command will enable the CloudGuard Controller services on the Security Management Server

  A. set cgcontroller state on

  B. controller on

  C. set cgcontroller on

  D. cloudguard on

  Correct Answer: D

• Question 26:

  What is the key component in securing and managing any environment?

  A. Security Management Server

  B. Security Gateway

  C. Security Policy

  D. Security Access

  Correct Answer: A

• Question 27:

  Adaptive Security Policies allow the deployment of new cloud based resources without

  A. Changing the cloud environment

  B. Paying for new resources

  C. Installing New Policies

  D. Installing New Applications

  Correct Answer: C

• Question 28:

  Which software blades (Check Point features) are not are not supported in AWS?

  A. IPS

  B. VPN blade

  C. All Check Point blades are supported

  D. Mobile Access (SSLVPN)

  Correct Answer: B

• Question 29:

  The Security Administrator needs to reconfigure the API server, which command would need to be ran?

  A. api reboot

  B. api reconf

  C. api restart

  D. api reconfig

  Correct Answer: D

• Question 30:

  How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

  A. It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.

  B. Micro-segmentation does not create boundaries.

  C. It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic

  D. It places inspection points between different applications, services, and single hosts within the same network segment.

  Correct Answer: A