156-560 시험 - Check Point실제시험문제와 답 - 76문항

Question No : 1

How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

A.It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.
B.Micro-segmentation does not create boundaries.
C.It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic
D.It places inspection points between different applications, services, and single hosts within the same network segment.

정답:

Question No : 2

The Administrators ability to protect data, systems, and assets While taking advantage of
cloud technologies is commonly called

A.Cost Optimization
B.Security
C.Operational Excellence
D.Performance Efficiency

정답:
Explanation:
The security pillar encompasses the ability to protect data, systems, and assets to take advantage of cloud technologies to improve your security.

Question No : 3

A utility that allows integration between SMS, the CloudGuard Network Solution, and CSPs, allowing the SMS to monitor and control scaling solutions in their associated cloud environments is called

A.CloudGuard Management Extension (CME)
B.CloudGuard Controller and Enforcer (CCE)
C.CloudGuard Scanner and Enforcer (CSE)
D.CloudGuard Controller (CC)

정답:

Question No : 4

The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________

A.The SDDC, CloudGuard Security Gateways, and the Security Management Server
B.The SDDC and CloudGuard Security Gateways.
C.The SDDC and the Security Management Server
D.CloudGuard Security Gateways and the Security Management Server

정답:

Question No : 5

Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?

A.Minimizes the risk of external threats by blocking access to highrisk sites and external users
B.Minimizes the risk of external threats by blocking accessed to the internet
C.Minimizes the risk of external threats by blocking access to all internal resources
D.Minimizes the risks of external threats by blocking access to services and ports

정답:

Question No : 6

Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back .
What could be the probable cause of this failure and roll back?

A.The Security Management Server that will be managing the Security Gateway had a lower version
B.The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions
C.The template used was for some cloud platform other than AWS
D.The web browser used to run the template was not compatible

정답:

Question No : 7

What is the key component in securing and managing any environment?

A.Security Management Server
B.Security Gateway
C.Security Policy
D.Security Access

정답:

Question No : 8

Which CloudGuard security platform enables organizations to view and access their security posture, find cloud misconfigurations, and enforce best practices?

A.CloudGuard laaS Private Cloud Solution
B.CloudGuard SaaS
C.CloudGuard Security Posture Management
D.CloudGuard laaS Public Cloud Solution

정답:

Question No : 9

What can a Security Admin do in a situation where collecting additional log file information to examine a CloudGuard Controller issue is required?

A.Execute a debug on the SMS
B.Set the operation to TRACE to collect more data.
C.Verify connectivity between the SMS and the SDD
D.Search for the information in the objects database.

정답:

Question No : 10

Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premises equipment, scripts, orchestration playbooks and CloudGuard Networkcloud resources, on- premise equipment, scripts.

A.CloudGuard Management Extension API (CME-API)
B.CloudGuard Controller API (CG-API)
C.Representational State Transfer (REST) APIs
D.Cloud Security Posture Management (CSPM)

정답:

Question No : 11

How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?

A.Per usage
B.Per Socket
C.Per vCore
D.Per Gateway

정답:

Question No : 12

On Azure, can you deploy a Check Point Standalone installation (Management + GW)?

A.No. it is not supported
B.Yes, via GitHub only
C.Yes. via PowerShell only
D.Yes, via solution template / PowerShell / Marketplace

정답:

Question No : 13

What is an alternative method to double NAT in Azure?

A.Scaling
B.System Routes
C.Peering
D.User Defined Routes

정답:

Question No : 14

What is public cloud?

A.Computing environment with limited resources
B.Computing environment located over the internet
C.A shared computing environment
D.Computing environment dedicated to one company

정답:

Question No : 15

Cloud Security Posture Management operational modes for cloud accounts are:

A.Read Only, Full Protection. Region Lock
B.Read Only, Read/Write. Region Lock
C.Read Only, Read/Write. Full Protection
D.Read/Write, Partial Protection, Full Protection

정답:

Check Point 156-560 시험