156-560 Dumps - Grab Out For [NEW-2023] CheckPoint Exam [Q50-Q71]

QUESTION 50
What is Performance Efficiency?

The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve

The ability to support development and run workloads effectively

In terms of the cloud, security is about architecting every workload to prevent

The ability of a Workload to function correctly and consistently in all expected

QUESTION 51
Which is not a Pillar of the Framework for the Cloud?

Performance Efficiency

Cost Optimization

Scalability

Reliability

QUESTION 52
How many AWS Internet gateways can you define in AWS?

Two per VPC

Unlimited

One per VPC

One per Region

QUESTION 53
How does the Cloud Security Posture Management (CSPM) service deliver intelligence threat feeds, enforce compliance policies, and apply security enhancement to the environment.

The Cloud Security Posture Management (CSPM) does this by using the SOAP protocol and XML

The Cloud Security Posture Management (CSPM) does this by .usingSSH and microagents

The Cloud Security Posture Management (CSPM) does this by using REST APIs

The Cloud Security Posture Management (CSPM) does this by using SIC connections on the cloud

QUESTION 54
What is an alternative method to double NAT in Azure?

Scaling

System Routes

Peering

User Defined Routes

QUESTION 55
Which scripting language is used by CloudGuard to develop templates that automate Security Gateway deployments?

Perl

C++

JSON

Python

QUESTION 56
Adding new Security Gateways as system load increases is an example of __________

Vertical Scaling

Network Scaling

Horizontal Scaling

System Scaling

QUESTION 57
The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________

The SDDC, CloudGuard Security Gateways, and the Security Management Server

The SDDC and CloudGuard Security Gateways.

The SDDC and the Security Management Server

CloudGuard Security Gateways and the Security Management Server

QUESTION 58
REST is an acronym for the following

Representation of Security Traffic

Really Efficient Security Template

Representational State Transfer

Real Security Threat

QUESTION 59
What is the CloudGuard solution?

Check Point solution for private and public cloud

Check Point solution for public cloud

Check Point solution for private cloud

Check Point virtual gateway

QUESTION 60
What is Operational Excellence?

The ability of a Workload to function correctly and consistently in all expected

In terms of the cloud, security is about architecting every workload to prevent

The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve

The ability to support development and run workloads effectively

QUESTION 61
To travel between spokes, non-transitive traffic uses ________ to allow Ipv4 and IPv6 traffic to reach a spoke network

a VTI

the Northbound hub

the Southbound hub

Peering

QUESTION 62
When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?

1. Verify process is running with ‘cloudguard on’ and 2. restart the api process with ‘api restart’

1. Verify process is running with ‘cloudguard on’ and 2. ‘test communication’ button the Data Center Server object

1. Reboot the Security Management Server and 2. restart the cloudguard process with ‘cloudguard on’

1. Reboot the Security Management Server and 2. restart the api process with ‘api restart’

QUESTION 63
What are the Automation tools?

API, CLI, Scripts, Shells and Templates

Terraform and Ansible

AMls

CloudFormation

QUESTION 64
What are two basic rules Check Point recommends for building an effective policy?

Cleanup and Stealth Rule

VPN and Admin Rules

Implicit and Explicit Rules

Access and Identity Rules

QUESTION 65
Which Security Gateway function inspects cloud applications and workload resources for malicious activity?

Application Control

Threat Prevention

Identity Awareness

Access Control

QUESTION 66
Can you configure NAT for internal VM’s on the Check Point Gateway in AWS?

Yes, you can add public IP’s to the Check Point

No. ail the NAT is being done by the ELB

No, the public IPs are defined directly on the in

Yes, the NAT is only defined for internal LB

QUESTION 67
Which pricing model gives administrators the ability to deploy devices as needed without the need to purchase blocks of vCore licenses?

Pay As You Go

Bring Your Own License

Central licensing

Local licensing

QUESTION 68
One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that:

State synchronization is required and must be done ONLY on a dedicated link

High Availability configurations support only two Security Gateway Members

High Availability configurations support only three Security Gateway members

VMAC mode is mandatory for all cluster interfaces

QUESTION 69
The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.

All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

All traffic that enters and exits each spoke must travel through a hub

The Hub and Spoke model is applicable ONLY to multi-cloud

QUESTION 70
What are two basic rules Check Point recommends for building an effective policy?

Cleanup and Stealth Rule

VPN and Admin Rules

Implicit and Explicit Rules

Access and Identity Rules