What can Data Center Objects represent?

Public IP. Private IP NAT or IAM roles

vNets. VPCs or Network Security Groups

Compute. Regions or Availability Zones

Public IP. Private IP NAT or IAM roles

Cloud Data Center. Tags, subnets, or hosts

An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it's IP address, how will the change be effected on the Security Gateway

With a property functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator

If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on

With a property functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator

The Data Center Object needs to be refreshed in the SmartCansoIe and then a policy install will be required

The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required

What can a Security Admin do in a situation where collecting additional log file information to examine a CloudGuard Controller issue is required?

Verify connectivity between the SMS and the SDDC.

Set the operation to TRACE to collect more data.

Verify connectivity between the SMS and the SDDC.

Search for the information in the objects database.

Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?

The template used was for some cloud platform other than AWS

The Security Management Server that will be managing the Security Gateway had a lower version

The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions

The template used was for some cloud platform other than AWS

The web browser used to run the template was not compatible

How does the Cloud Security Posture Management (CSPM) service deliver intelligence threat feeds, enforce compliance policies, and apply security enhancement to the environment.

The Cloud Security Posture Management (CSPM) does this by using SIC connections on the cloud

The Cloud Security Posture Management (CSPM) does this by using the SOAP protocol and XML

The Cloud Security Posture Management (CSPM) does this by .usingSSH and microagents

The Cloud Security Posture Management (CSPM) does this by using REST APIs

The Cloud Security Posture Management (CSPM) does this by using SIC connections on the cloud

Cloud Security Posture Management uses CloudBots to assist with________________.

automatic compliance remediation

cloud account configurations and data flows

securing IAM account credentials.

identifying where the organization's security posture need:

automatic compliance remediation

Which CloudGuard security platform enables organizations to view and access their security posture, find cloud misconfigurations, and enforce best practices?

CloudGuard Security Posture Management

CloudGuard laaS Private Cloud Solution

CloudGuard Security Posture Management

CloudGuard laaS Public Cloud Solution

When Cloud Security Posture Management discovers non- compliant cloud resources, CloudBot applications perform automated remediation’s to correct any violations. How true is this statement?

This is true, however it requires Full Protection access to the Cloud Account to perform automated remediation

This is not true, Cloud Security Posture Management (CSPIU) can only report non-compliance and cannot remediate by itself

This is partially true, however the automated remediation is not done by CloudBot applications but it is done by the Security Management Server

This is not true because CloudBot applications are used to provide chat service to respond to noncompliance alerts

Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?

Minimizes the risks of external threats by blocking access to services and ports

Minimizes the risk of external threats by blocking access to high risk sites and external users

Minimizes the risk of external threats by blocking accessed to the internet

Minimizes the risk of external threats by blocking access to all internal resources

Minimizes the risks of external threats by blocking access to services and ports

What platform provides continuous compliance and governance assessments that evaluate public infrastructure according to industry to industry standards and best practices?

Cloud Security Posture Management

After the cloud acquisition process finishes. Cloud Security Posture Security module secures access to cloud environments by performing controls access to cloud environments by performing the following tasks: Visualizes Security Policies in cloud environments, control access to protected cloud assets with short-term dynamic access leases, and______________.

Deploys new management resources

Automatically Installs Policies

Deploys new management resources

Manages Network Security Groups

Deploys new internal cloud resources

Cloud Security Posture Management operational modes for cloud accounts are:

Read Only, Full Protection. Region Lock

Read Only, Read/Write. Region Lock

Read Only, Read/Write. Full Protection

Read/Write, Partial Protection, Full Protection

How is CloudGuard for Azure licensed in PAYG (Pay As You Go) mode?

Per hour based on resources consumed

Can you configure Micro segmentation (control traffic inside a subnet) on Azure?

No. Micro segmentation is not supported on Azure

According to best practices what would be the best way to install a Check Point cluster on AWS?

Following the instruction from the relevant Check Point SK

Why is an IAM role created when installing a cluster on AWS?

IAM role is created for auditing purposes

In order to perform cluster related changes

It is created for the installation process only, it gets deleted

IAM role is created for auditing purposes

Which security principles are indicative of the CloudGuard Secure Public Cloud Blueprint architecture?

Security with Advanced Threat Prevention; Network Division; Agility, Automation, Efficiency, and Elasticity; with Cloud Borders

Security with Advanced Threat Prevention Network Unification Agility Automation, Efficiency, and Elasticity; Borderless

Security with Advanced Threat Prevention: Network Segmentation: Agility, Automation Efficiency, and Elasticity; Borderless

Security with Advanced Threat Protocol; Network Distribution; Agility, Automation, Efficiency, and Cloud Rigidity Borderless

What is public cloud?

Computing environment with limited resources

Computing environment located over the internet

Computing environment dedicated to one company

Which software blades (Check Point features) are not are not supported in AWS?

All Check Point blades are supported

How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.

Micro-segmentation does not create boundaries.

It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic

It places inspection points between different applications, services, and single hosts within the same network segment.

On Azure, can you deploy a Check Point Standalone installation (Management + GW)?

Yes, via solution template / PowerShell / Marketplace

Can you configure NAT for internal VM's on the Check Point Gateway in AWS?

No, the public IPs are defined directly on the in

Yes, you can add public IP's to the Check Point

No. ail the NAT is being done by the ELB

No, the public IPs are defined directly on the in

Yes, the NAT is only defined for internal LB

What is the CloudGuard solution?

Check Point solution for private and public cloud

Check Point solution for public cloud

Check Point solution for private cloud

When using system routes and user defined routes in Azure, which takes precedent?

The most specific route takes precedent

The user defined route takes precedent

The system route always takes precedent

The most specific route takes precedent

The newest route takes precedent

When choosing PAYG (Pay As You Go) licensing in AWS, it is provided:

Via specific dedicated channels

Through the regular Check Point channels

Which solution delivers a software platform for public cloud security and compliance orchestration?

Cloud Security Posture Management

Which language can be used by users of Cloud Security Posture Management to create custom Security Policies?

Governance Specific Language (GSL)

eXtensible Markup Language (XML)

Posture Management Language (PML)

Governance Specific Language (GSL)

JavaScript Object Notation (JSON)

When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?

1. Verify process is running with 'cloudguard on' and 2. 'test communication' button the Data Center Server object

1. Verify process is running with 'cloudguard on' and 2. restart the api process with 'api restart'

1. Verify process is running with 'cloudguard on' and 2. 'test communication' button the Data Center Server object

1. Reboot the Security Management Server and 2. restart the cloudguard process with 'cloudguard on'

1. Reboot the Security Management Server and 2. restart the api process with 'api restart'

Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?

$DADIR/logs/controller_proxy.elg

$FWDIR/logs/cloud_controller.elg

Checkpoint 156-560 Practice Test 2 - Free Online Exam Prep & Questions

What is the key component in securing and managing any environment?

Security Management Server

Security Gateway

Security Policy

Security Access

Comment (0)

Checkpoint 156-560 Practice Test 2

Question

Checkpoint 156-560 Practice Tests

Practice Tests