Guaranteed Success in CheckPoint CCCS 156-560 Exam Dumps [Q45-Q60]

Q45. Cloud Security Posture Management operational modes for cloud accounts are:

Read Only, Full Protection. Region Lock

Read Only, Read/Write. Region Lock

Read Only, Read/Write. Full Protection

Read/Write, Partial Protection, Full Protection

Q46. What platform provides continuous compliance and governance assessments that evaluate public infrastructure according to industry to industry standards and best practices?

Cloud Security Posture Management

CloudGuard laaS Public Cloud

CloudGuard SaaS

CloudGuard laaS Private Cloud

Q47. Which one of the following is part of the Orchestration Playbook process for creating a new spoke and an automated Security Gateway?

Transfer of resources to a VPN

An event trigger

Vertical scaling

Communication with the OS

Q48. What can Data Center Objects represent?

vNets. VPCs or Network Security Groups

Compute. Regions or Availability Zones

Public IP. Private IP NAT orIAM roles

Cloud Data Center. Tags, subnets, or hosts

Q49. Logging Implied rules, enabling Hit Count and defining advanced VPN functions are all settings that are applied as

Inline Layer

Global Properties

Policy Settings

Gateway Properties

Q50. Where can I find solution templates for Azure?

On the market place

In a search on the Internet

At the relevant SK

In a special Azure page

Q51. What are two basic rules Check Point recommends for building an effective policy?

Cleanup and Stealth Rule

VPN and Admin Rules

Implicit and Explicit Rules

Access and Identity Rules

Q52. The Administrators ability to protect data, systems, and assets While taking advantage of cloud technologies is commonly called

Cost Optimization

Security

Operational Excellence

Performance Efficiency

Q53. Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premises equipment, scripts, orchestration playbooks and CloudGuard Networkcloud resources, on- premise equipment, scripts.

CloudGuard Management Extension API (CME-API)

CloudGuard Controller API (CG-API)

Representational State Transfer (REST) APIs

Cloud Security Posture Management (CSPM)

Q54. Which command will enable the CloudGuard Controller services on the Security Management Server

set cgcontroller state on

controller on

set cgcontroller on

cloudguard on

Q55. Which of these Cloud Platforms support User Defined Route (UDR) to force traffic destined for spoke networks to go through a network virtual appliance

Amazon AWS

Google Cloud Platform

Amazon AWS and Google Cloud Platform

Microsoft Azure

Q56. Cloud Security Posture Management (CSPM) operates as which type of service based platform?

CaaS

SaaS

PaaS

laaS

Q57. Adding new Security Gateways as system load increases is an example of __________

Vertical Scaling

Network Scaling

Horizontal Scaling

System Scaling

Q58. The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.

All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

All traffic that enters and exits each spoke must travel through a hub

The Hub and Spoke model is applicable ONLY to multi-cloud
environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

Q59. What is vertical scaling?

Tunes the environment up and down according to the resource capacity needs

Tunes the environment by automatically adding or removing resource to the SDN

Tunes the environment by manually adding or removing resource to an SDDC

Scaling method that does not require a system shutdown to add or remove resources.

Q60. To travel between spokes, non-transitive traffic uses ________ to allow Ipv4 and IPv6 traffic to reach a spoke network

a VTI

the Northbound hub

the Southbound hub

Peering