Checkpoint 156-560 Practice Test - Questions Answers, Page 7
Question list
List of questions
Related questions
Where can I find solution templates for Azure?
A.
On the market place
B.
In a search on the Internet
C.
At the relevant SK
D.
In a special Azure page
How is CloudGuard for Azure licensed in PAYG (Pay As You Go) mode?
A.
Per hour based on resources consumed
B.
Per Gateway
C.
Per Socket
D.
Per vCore
Can you configure Micro segmentation (control traffic inside a subnet) on Azure?
A.
No. Micro segmentation is not supported on Azure
B.
Yes. via UDR
C.
Yes, via System Routes
D.
Yes, via routes on vNet
According to best practices what would be the best way to install a Check Point cluster on AWS?
A.
Following the instruction from the relevant Check Point SK
B.
With PowerShell
C.
From AWS Console
D.
From AWS Market Place
Why is an IAM role created when installing a cluster on AWS?
A.
In order to perform cluster related changes
B.
It is created for the installation process only, it gets deleted
C.
IAM role is created for auditing purposes
D.
IAM role is not created
Which security principles are indicative of the CloudGuard Secure Public Cloud Blueprint architecture?
A.
Security with Advanced Threat Prevention; Network Division; Agility, Automation, Efficiency, and Elasticity; with Cloud Borders
B.
Security with Advanced Threat Prevention Network Unification Agility Automation, Efficiency, and Elasticity; Borderless
C.
Security with Advanced Threat Prevention: Network Segmentation: Agility, Automation Efficiency, and Elasticity; Borderless
D.
Security with Advanced Threat Protocol; Network Distribution; Agility, Automation, Efficiency, and Cloud Rigidity Borderless
What is public cloud?
A.
Computing environment with limited resources
B.
Computing environment located over the internet
C.
A shared computing environment
D.
Computing environment dedicated to one company
Which software blades (Check Point features) are not are not supported in AWS?
A.
IPS
B.
VPN blade
C.
All Check Point blades are supported
D.
Mobile Access (SSLVPN)
How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?
A.
It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.
B.
Micro-segmentation does not create boundaries.
C.
It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic
D.
It places inspection points between different applications, services, and single hosts within the same network segment.
On Azure, can you deploy a Check Point Standalone installation (Management + GW)?
A.
No. it is not supported
B.
Yes, via GitHub only
C.
Yes. via PowerShell only
D.
Yes, via solution template / PowerShell / Marketplace
Question