[Feb-2023] Verified 156-560 dumps Q&As - 156-560 dumps with Correct Answers [Q28-Q42]

NEW QUESTION 28
How many AWS Internet gateways can you define in AWS?

Two per VPC

Unlimited

One per VPC

One per Region

NEW QUESTION 29
What is Reliability according to the Five Pillars?

The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve

The ability of a Workload to function correctly and consistently in all expected.

The ability to support development and run workload effectively

In terms of the cloud, security is about architecting every workload to prevent.

NEW QUESTION 30
The ability to support development and run workloads effectively is commonly called:

Performance Efficiency

Cost Optimization

Operational Excellence

Reliability

NEW QUESTION 31
Which language can be used by users of Cloud Security Posture Management to create custom Security Policies?

eXtensible Markup Language (XML)

Posture Management Language (PML)

Governance Specific Language (GSL)

JavaScript Object Notation (JSON)

NEW QUESTION 32
The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.

All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

All traffic that enters and exits each spoke must travel through a hub

The Hub and Spoke model is applicable ONLY to multi-cloud
environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

NEW QUESTION 33
Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?

The Security Management Server that will be managing the Security Gateway had a lower version

The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions

The template used was for some cloud platform other than AWS

The web browser used to run the template was not compatible

NEW QUESTION 34
To travel between spokes, non-transitive traffic uses ________ to allow Ipv4 and IPv6 traffic to reach a spoke network

a VTI

the Northbound hub

the Southbound hub

Peering

NEW QUESTION 35
Cloud Security Posture Management operational modes for cloud accounts are:

Read Only, Full Protection. Region Lock

Read Only, Read/Write. Region Lock

Read Only, Read/Write. Full Protection

Read/Write, Partial Protection, Full Protection

NEW QUESTION 36
What is Reliability according to the Five Pillars?

The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve

The ability of a Workload to function correctly and consistently in all expected.

The ability to support development and run workload effectively

In terms of the cloud, security is about architecting every workload to prevent.

NEW QUESTION 37
One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that:

State synchronization is required and must be done ONLY on a dedicated link

High Availability configurations support only two Security Gateway Members

High Availability configurations support only three Security Gateway members

VMAC mode is mandatory for all cluster interfaces

NEW QUESTION 38
What are two basic rules Check Point recommends for building an effective policy?

Cleanup and Stealth Rule

VPN and Admin Rules

Implicit and Explicit Rules

Access and Identity Rules

NEW QUESTION 39
The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.

All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

All traffic that enters and exits each spoke must travel through a hub

The Hub and Spoke model is applicable ONLY to multi-cloud

NEW QUESTION 40
Logging Implied rules, enabling Hit Count and defining advanced VPN functions are all settings that are applied as

Inline Layer

Global Properties

Policy Settings

Gateway Properties

NEW QUESTION 41
What is public cloud?

Computing environment with limited resources

Computing environment located over the internet

A shared computing environment

Computing environment dedicated to one company

NEW QUESTION 42
Which CloudGuard security platform enables organizations to view and access their security posture, find cloud misconfigurations, and enforce best practices?

CloudGuard laaS Private Cloud Solution

CloudGuard SaaS

CloudGuard Security Posture Management

CloudGuard laaS Public Cloud Solution