Weekend Biggest Discount Flat 70% Offer - Ends in 0d 00h 00m 00s - Coupon code: 70diswrap

Checkpoint 156-560 Dumps

Page: 1 / 8
Total 83 questions

Check Point Certified Cloud Specialist (CCCS) Questions and Answers

Question 1

A utility that allows integration between SMS, the CloudGuard Network Solution, and CSPs, allowing the SMS to monitor and control scaling solutions in their associated cloud environments is called

Options:

A.

CloudGuard Management Extension (CME)

B.

CloudGuard Controller and Enforcer (CCE)

C.

CloudGuard Scanner and Enforcer (CSE)

D.

CloudGuard Controller (CC)

Question 2

Which pricing model gives administrators the ability to deploy devices as needed without the need to purchase blocks of vCore licenses?

Options:

A.

Pay As You Go

B.

Bring Your Own License

C.

Central licensing

D.

Local licensing

Question 3

How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

Options:

A.

It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.

B.

Micro-segmentation does not create boundaries.

C.

It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic

D.

It places inspection points between different applications, services, and single hosts within the same network segment.

Question 4

On Azure, can you deploy a Check Point Standalone installation (Management + GW)?

Options:

A.

No. it is not supported

B.

Yes, via GitHub only

C.

Yes. via PowerShell only

D.

Yes, via solution template / PowerShell / Marketplace

Question 5

Why is an IAM role created when installing a cluster on AWS?

Options:

A.

In order to perform cluster related changes

B.

It is created for the installation process only, it gets deleted

C.

IAM role is created for auditing purposes

D.

IAM role is not created

Question 6

What is Reliability according to the Five Pillars?

Options:

A.

The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve

B.

The ability of a Workload to function correctly and consistently in all expected.

C.

The ability to support development and run workload effectively

D.

In terms of the cloud, security is about architecting every workload to prevent.

Question 7

Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?

Options:

A.

The Security Management Server that will be managing the Security Gateway had a lower version

B.

The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions

C.

The template used was for some cloud platform other than AWS

D.

The web browser used to run the template was not compatible

Question 8

Logging Implied rules, enabling Hit Count and defining advanced VPN functions are all settings that are applied as

Options:

A.

Inline Layer

B.

Global Properties

C.

Policy Settings

D.

Gateway Properties

Question 9

The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________

Options:

A.

The SDDC, CloudGuard Security Gateways, and the Security Management Server

B.

The SDDC and CloudGuard Security Gateways.

C.

The SDDC and the Security Management Server

D.

CloudGuard Security Gateways and the Security Management Server

Question 10

Can you configure Micro segmentation (control traffic inside a subnet) on Azure?

Options:

A.

No. Micro segmentation is not supported on Azure

B.

Yes. via UDR

C.

Yes, via System Routes

D.

Yes, via routes on vNet

Question 11

CloudGuard uses several management tools to create and manage Security Policies. Which is NOT one of those tools?

Options:

A.

Gaia Portal

B.

CloudGuard Controller

C.

SmartConsole

D.

CLI

Page: 1 / 8
Total 83 questions