Checkpoint 156-560 Practice Test – Member Shared Questions, Page 5

Question 41

What is the key component in securing and managing any environment?

A.

Security Management Server

B.

Security Gateway

C.

Security Policy

D.

Security Access

Show Answer Comment (0)

Question 42

What can Data Center Objects represent?

A.

vNets. VPCs or Network Security Groups

B.

Compute. Regions or Availability Zones

C.

Public IP. Private IP NAT or IAM roles

D.

Cloud Data Center. Tags, subnets, or hosts

Show Answer Comment (0)

Question 43

An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it's IP address, how will the change be effected on the Security Gateway

A.

If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on

B.

With a property functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator

C.

The Data Center Object needs to be refreshed in the SmartCansoIe and then a policy install will be required

D.

The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required

Show Answer Comment (0)

Question 44

What can a Security Admin do in a situation where collecting additional log file information to examine a CloudGuard Controller issue is required?

A.

Execute a debug on the SMS

B.

Set the operation to TRACE to collect more data.

C.

Verify connectivity between the SMS and the SDDC.

D.

Search for the information in the objects database.

Show Answer Comment (0)

Question 45

Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?

A.

The Security Management Server that will be managing the Security Gateway had a lower version

B.

The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions

C.

The template used was for some cloud platform other than AWS

D.

The web browser used to run the template was not compatible

Show Answer Comment (0)

Question 46

To troubleshoot CloudGuard Controller, administrators can execute the following command:

A.

cloudguard troubleshoot

B.

cloudguard security

C.

cloudguard off

D.

cloudguard on

Show Answer Comment (0)

Question 47

Where are the api logs found on the Security Management Server?

A.

$FWDIR/Iog/api.elg

B.

/var/tmp/api.elg

C.

/var/log/api.elg

D.

/opt/log/api.elg

Show Answer Comment (0)

Question 48

Which command will enable the CloudGuard Controller services on the Security Management Server

A.

set cgcontroller state on

B.

controller on

C.

set cgcontroller on

D.

cloudguard on

Show Answer Comment (0)

Question 49

The Security Administrator needs to reconfigure the API server, which command would need to be ran?

Become a Premium Member for full access

Unlock Premium Member

Question 50

How does the Cloud Security Posture Management (CSPM) service deliver intelligence threat feeds, enforce compliance policies, and apply security enhancement to the environment.

Become a Premium Member for full access

Unlock Premium Member