156-560 Online Training Archives

Now passing Check Point certification 156-560 exam is not easy, so choosing a good Check Point 156-560 Check Point Certified Cloud Specialist (CCCS) Online Training is a guarantee of success. Exam4Training will be the first time to provide you with exam information and Check Point 156-560 Check Point Certified Cloud Specialist (CCCS) Online Training to let you be fully prepared to ensure 100% to pass 156-560 Check Point Certified Cloud Specialist (CCCS) exam. Exam4Training can not only allow you for the first time to participate in the CCCS 156-560 exam to pass it successfully, but also help you save a lot of valuable time.

Page 1 of 3

1. Cloud Security Posture Management uses CloudBots to assist with________________.

cloud account configurations and data flows

securing IAM account credentials.

identifying where the organization's security posture need:

automatic compliance remediation

2. Logging Implied rules, enabling Hit Count and defining advanced VPN functions are all settings

that are applied as

Inline Layer

Global Properties

Policy Settings

Gateway Properties

3. Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?

Minimizes the risk of external threats by blocking access to highrisk sites and external users

Minimizes the risk of external threats by blocking accessed to the internet

Minimizes the risk of external threats by blocking access to all internal resources

Minimizes the risks of external threats by blocking access to services and ports

4. Where can I find solution templates for Azure?

On the market place

In a search on the Internet

At the relevant SK

In a special Azure page

5. What is Cloud Security according to the Five Pillars?

The ability to support development and run workloads effectively

The ability of a Workload to function correctly and consistently in all expected

The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demands changes and technologies evolve

In terms of tie cloud, security is about architecting every workload to prevent

6. Check Point's Public Cloud model is described as the following

A Security Matrix Model

A Hub and Spoke Model

An Advanced Threat Tunnel Model

A Borderless Model

7. Which pricing model gives administrators the ability to deploy devices as needed without the

need to purchase blocks of vCore licenses?

Pay As You Go

Bring Your Own License

Central licensing

Local licensing

8. Adding new Security Gateways as system load increases is an example of __________

Vertical Scaling

Network Scaling

Horizontal Scaling

System Scaling

9. Which one of the following is part of the Orchestration Playbook process for creating a new

spoke and an automated Security Gateway?

Transfer of resources to a VPN

An event trigger

Vertical scaling

Communication with the OS

10. The Security Administrator needs to reconfigure the API server, which command would need to be ran?

api reboot

api reconf

api restart

api reconfig

Page 2 of 3

11. Cloud Security Posture Management operational modes for cloud accounts are:

Read Only, Full Protection. Region Lock

Read Only, Read/Write. Region Lock

Read Only, Read/Write. Full Protection

Read/Write, Partial Protection, Full Protection

12. What is public cloud?

Computing environment with limited resources

Computing environment located over the internet

A shared computing environment

Computing environment dedicated to one company

13. What is an alternative method to double NAT in Azure?

Scaling

System Routes

Peering

User Defined Routes

14. On Azure, can you deploy a Check Point Standalone installation (Management + GW)?

No. it is not supported

Yes, via GitHub only

Yes. via PowerShell only

Yes, via solution template / PowerShell / Marketplace

15. How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?

Per usage

Per Socket

Per vCore

Per Gateway

16. Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premises equipment, scripts, orchestration playbooks and CloudGuard Networkcloud resources, on- premise equipment, scripts.

CloudGuard Management Extension API (CME-API)

CloudGuard Controller API (CG-API)

Representational State Transfer (REST) APIs

Cloud Security Posture Management (CSPM)

17. What can a Security Admin do in a situation where collecting additional log file information to examine a CloudGuard Controller issue is required?

Execute a debug on the SMS

Set the operation to TRACE to collect more data.

Verify connectivity between the SMS and the SDD

Search for the information in the objects database.

18. Which CloudGuard security platform enables organizations to view and access their security posture, find cloud misconfigurations, and enforce best practices?

CloudGuard laaS Private Cloud Solution

CloudGuard SaaS

CloudGuard Security Posture Management

CloudGuard laaS Public Cloud Solution

19. What is the key component in securing and managing any environment?

Security Management Server

Security Gateway

Security Policy

Security Access

20. Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back .

What could be the probable cause of this failure and roll back?

The Security Management Server that will be managing the Security Gateway had a lower version

The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions

The template used was for some cloud platform other than AWS

The web browser used to run the template was not compatible

Page 3 of 3

21. Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?

Minimizes the risk of external threats by blocking access to highrisk sites and external users

Minimizes the risk of external threats by blocking accessed to the internet

Minimizes the risk of external threats by blocking access to all internal resources

Minimizes the risks of external threats by blocking access to services and ports

22. The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________

The SDDC, CloudGuard Security Gateways, and the Security Management Server

The SDDC and CloudGuard Security Gateways.

The SDDC and the Security Management Server

CloudGuard Security Gateways and the Security Management Server

23. A utility that allows integration between SMS, the CloudGuard Network Solution, and CSPs, allowing the SMS to monitor and control scaling solutions in their associated cloud environments is called

CloudGuard Management Extension (CME)

CloudGuard Controller and Enforcer (CCE)

CloudGuard Scanner and Enforcer (CSE)

CloudGuard Controller (CC)

24. The Administrators ability to protect data, systems, and assets While taking advantage of

cloud technologies is commonly called

Cost Optimization

Security

Operational Excellence

Performance Efficiency

25. How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.

Micro-segmentation does not create boundaries.

It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic

It places inspection points between different applications, services, and single hosts within the same network segment.