CheckPoint 156-561 Real Exam Questions and Answers FREE
Exam Dumps 156-561 Practice Free Latest CheckPoint Practice Tests
NEW QUESTION # 56
Cloud Security Posture Management uses which of the following to integrate with cloud accounts?
- A. SDDC
- B. CloudGuard Controller
- C. IAM account credentials
- D. Security Objects
Answer: C
NEW QUESTION # 57
Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?
- A. The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions
- B. The web browser used to run the template was not compatible
- C. The template used was for some cloud platform other than AWS
- D. The Security Management Server that will be managing the Security Gateway had a lower version
Answer: C
NEW QUESTION # 58
To troubleshoot CloudGuard Controller, administrators can execute the following command:
- A. cloudguard troubleshoot
- B. cloudguard on
- C. cloudguard off
- D. cloudguard security
Answer: B
NEW QUESTION # 59
Check Point's Public Cloud model is described as the following
- A. A Hub and Spoke Model
- B. A Borderless Model
- C. An Advanced Threat Tunnel Model
- D. A Security Matrix Model
Answer: A
Explanation:
https://www.checkpoint.com/downloads/products/check-point-secure-cloud-blueprint-azure-whitepaper.pdf (p. 5)
NEW QUESTION # 60
What does the Adaptive Security Policy involve to import the Data Center Objects?
- A. CloudGuard Gateway
- B. CloudGuard Access Control
- C. CloudGuard API
- D. CloudGuard Controller
Answer: D
Explanation:
NEW QUESTION # 61
Logging Implied rules, enabling Hit Count and defining advanced VPN functions are all settings that are applied as
- A. Inline Layer
- B. Gateway Properties
- C. Policy Settings
- D. Global Properties
Answer: D
NEW QUESTION # 62
When Cloud Security Posture Management discovers non-compliant cloud resources, CloudBot applications perform automated remediations to correct any violations. How true is this statement?
- A. This is partially true, however the automated remediation is not done by CloudBot applications but it is done by the Security Management Server
- B. This is not true because CloudBot applications are used to provide chat service to respond to non-compliance alerts
- C. This is true, however it requires Full Protection access to the Cloud Account to perform automated remediation
- D. This is not true, Cloud Security Posture Management (CSPM) can only report non-compliance and cannot remediate by itself
Answer: C
NEW QUESTION # 63
How is CloudGuard for Azure licensed in PAYG (Pay As You Go) mode?
- A. Per vCore
- B. Per hour based on resources consumed
- C. Per Socket
- D. Per Gateway
Answer: B
Explanation:
NEW QUESTION # 64
Which Security Gateway function inspects cloud applications and workload resources for malicious activity?
- A. Access Control
- B. Identity Awareness
- C. Threat Prevention
- D. Application Control
Answer: C
NEW QUESTION # 65
Which security principles are indicative of the CloudGuard Secure Public Cloud Blueprint architecture?
- A. Security with Advanced Threat Prevention: Network Segmentation: Agility, Automation Efficiency, and Elasticity; Borderless
- B. Security with Advanced Threat Protocol; Network Distribution; Agility, Automation, Efficiency, and Cloud Rigidity Borderless
- C. Security with Advanced Threat Prevention; Network Division; Agility, Automation, Efficiency, and Elasticity; with Cloud Borders
- D. Security with Advanced Threat Prevention Network Unification Agility Automation, Efficiency, and Elasticity; Borderless
Answer: C
NEW QUESTION # 66
What platform provides continuous compliance and governance assessments that evaluate public infrastructure according to industry to industry standards and best practices?
- A. Cloud Security Posture Management
- B. CloudGuard laaS Private Cloud
- C. CloudGuard SaaS
- D. CloudGuard laaS Public Cloud
Answer: D
NEW QUESTION # 67
Why is an IAM role created when installing a cluster on AWS?
- A. IAM role is created for auditing purposes
- B. IAM role is not created
- C. In order to perform cluster related changes
- D. It is created for the installation process only, it gets deleted
Answer: A
NEW QUESTION # 68
The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.
- A. All traffic that enters and exits each spoke must travel through a hub
- B. The Hub and Spoke model is applicable ONLY to multi-cloud
- C. A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.
- D. All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.
Answer: D
NEW QUESTION # 69
What is Operational Excellence?
- A. The ability of a Workload to function correctly and consistently in all expected
- B. The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve
- C. The ability to support development and run workloads effectively
- D. In terms of the cloud, security is about architecting every workload to prevent
Answer: C
Explanation:
The Operational Excellence pillar includes the ability to support development and run workloads effectively, gain insight into their operation, and continuously improve supporting processes and procedures to delivery business value.
NEW QUESTION # 70
How many AWS Internet gateways can you define in AWS?
- A. One per VPC
- B. Unlimited
- C. Two per VPC
- D. One per Region
Answer: A
NEW QUESTION # 71
Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premises equipment, scripts, orchestration playbooks and CloudGuard Network cloud resources, on- premise equipment, scripts.
- A. Cloud Security Posture Management (CSPM)
- B. CloudGuard Controller API (CG-API)
- C. Representational State Transfer (REST) APIs
- D. CloudGuard Management Extension API (CME-API)
Answer: D
NEW QUESTION # 72
The framework for cloud security consists of five basic components, or pillars. Making small, reversible changes is a design principle of which of these five pillars?
- A. Operational Excellence
- B. Reliability
- C. Performance Efficiency
- D. Cost Optimization
Answer: A
NEW QUESTION # 73
To travel between spokes, non-transitive traffic uses ________ to allow Ipv4 and IPv6 traffic to reach a spoke network
- A. Peering
- B. the Southbound hub
- C. a VTI
- D. the Northbound hub
Answer: A
NEW QUESTION # 74
After the cloud acquisition process finishes. Cloud Security Posture Security module secures access to cloud environments by performing controls access to cloud environments by performing the following tasks: Visualizes Security Policies in cloud environments, control access to protected cloud assets with short-term dynamic access leases, and______________.
- A. Manages Network Security Groups
- B. Automatically Installs Policies
- C. Deploys new internal cloud resources
- D. Deploys new management resources
Answer: D
NEW QUESTION # 75
Which of the following is the Customer's Responsibility in the shared responsibility model used in the cloud?
- A. Customer Employee Training
- B. Physical and Environment Controls
- C. Infrastructure Patching
- D. Infrastructure Configuration
Answer: A
Explanation:
Customer Responsibilities: Customers are responsible for the data in their cloud (OS, updates, security patches, data integrity of their apps, encryption, assent classficiation, IAM
> Guest OS and Application Patching and Configuration
> Customer Emploeyee Training
> Service, Communication and Data Security
NEW QUESTION # 76
REST is an acronym for the following
- A. Representational State Transfer
- B. Really Efficient Security Template
- C. Real Security Threat
- D. Representation of Security Traffic
Answer: A
Explanation:
The abbreviation REST stands for "Representational State Transfer" and refers to a software architectural style. It is based on six principles that describe how networked resources are defined and addressed on the web, for example in a cloud.
NEW QUESTION # 77
The Administrators ability to protect data, systems, and assets While taking advantage of cloud technologies is commonly called
- A. Performance Efficiency
- B. Cost Optimization
- C. Operational Excellence
- D. Security
Answer: D
Explanation:
The security pillar encompasses the ability to protect data, systems, and assets to take advantage of cloud technologies to improve your security.
NEW QUESTION # 78
Cloud Security Posture Management operational modes for cloud accounts are:
- A. Read Only, Read/Write. Full Protection
- B. Read Only, Full Protection. Region Lock
- C. Read/Write, Partial Protection, Full Protection
- D. Read Only, Read/Write. Region Lock
Answer: B
Explanation:
NEW QUESTION # 79
......
Verified 156-561 Exam Dumps Q&As - Provide 156-561 with Correct Answers: https://www.validtorrent.com/156-561-valid-exam-torrent.html
156-561 Exam Questions | Real 156-561 Practice Dumps: https://drive.google.com/open?id=1gbbXb02sPxKeNJwBc6rlYP0V_5x5fPAC