156-560 Practice Exam — 205 Free Checkpoint Questions

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

205Practice Questions

3Study Modes

Free

TopicSort

Question 1

Deploying a Management Server

What MS Azure feature needs to be configured to allow traffic to the gateway?

A User defined routes
B Source/Destination Check
C IP Forwarding
D IP Check

Question 2

Adaptive Security Policy

Question 3

Introducing CloudGuard

Question 4

Automation and Orchestration

Question 5

High Availability and Scalability

Question 6

Deploying a Management Server

Question 7

Adaptive Security Policy

Question 8

Introducing CloudGuard

Question 9

Introducing CloudGuard

Question 10

Adaptive Security Policy

Question 11

High Availability and Scalability

Question 12

Logs, Monitoring, and Troubleshooting

Question 13

High Availability and Scalability

Question 14

Introducing CloudGuard

Question 15

Introducing CloudGuard

Question 16

Automation and Orchestration

Question 17

Introducing CloudGuard

Question 18

Introducing CloudGuard

Question 19

High Availability and Scalability

Question 20

Adaptive Security Policy

Question 21

High Availability and Scalability

Question 22

High Availability and Scalability

Question 23

Adaptive Security Policy

Question 24

Adaptive Security Policy

Question 25

Introducing CloudGuard

Page 1 of 9 • Questions 1-25 of 205

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

CloudGuard uses several management tools to create and manage Security Policies. Which is NOT one of those tools?

A Gaia Portal
B CloudGuard Controller
C SmartConsole
D CLI

Which is not a responsibility of the CSP (Cloud Service Provider)?

A Infrastructure Patching and Configuration
B Physical and Environment Controls
C Data
D CSP Employee Training

Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premise equipment, scripts, orchestration playbooks, and CloudGuard Network

A CloudGuard Management Extension API (CME-API)
B CloudGuard Controller API (CG-API)
C Representational Slate Transfer (REST) APIs
D Cloud Security Posture Management (CSPM) API

One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that

A State synchronization is required and must be done ONLY on a dedicated link
B High Availability configurations support only two Security Gateway members
C High Availability configurations support only three Security Gateway members
D VMAC mode is mandatory for all cluster interfaces

Question 6

Deploying a Management Server

Question 7

Adaptive Security Policy

Question 8

Introducing CloudGuard

Question 9

Introducing CloudGuard

Question 10

Adaptive Security Policy

Question 11

High Availability and Scalability

Question 12

Logs, Monitoring, and Troubleshooting

Question 13

High Availability and Scalability

Question 14

Introducing CloudGuard

Question 15

Introducing CloudGuard

Question 16

Automation and Orchestration

Question 17

Introducing CloudGuard

Question 18

Introducing CloudGuard

Question 19

High Availability and Scalability

Question 20

Adaptive Security Policy

Question 21

High Availability and Scalability

Question 22

High Availability and Scalability

Question 23

Adaptive Security Policy

Question 24

Adaptive Security Policy

Question 25

Introducing CloudGuard

Deploying CloudGuard IaaS security solutions involves which process?

A One that launches virtual machines quickly
B One that quickly enables network configuration
C One that creates threat prevention boundaries
D Moving hardware to another SDN

Can you configure Micro segmentation (control traffic inside a subnet) on Azure?

A No, Micro segmentation is not supported on Azure
B Yes, via UDR
C Yes, via System Routes
D Yes, via routes on vNet

Which Security Gateway function inspects cloud applications and workload resources for malicious activity?

A Application Control
B Threat Prevention
C Identity Awareness
D Access Control

Which software blades (Check Point features) are not supported in AWS?

A IPS
B VPN blade
C All Check Point blades are supported
D Mobile Access (SSLVPN)

Which appliance type does the Check Point management control with a single policy?

A Physical
B Physical, Virtual and Cloud
C Physical and Cloud
D Virtual and Cloud

Which is not an advantage of the Hub and Spoke Architecture Model?

A Automation
B Network Segmentation
C Complexity
D Borderless

What is Operational Excellence?

A The ability of a Workload to function correctly and consistently in all expected
B In terms of the cloud, security is about architecting every workload to prevent
C The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve
D The ability to support development and run workloads effectively

What is Reliability according to the Five Pillars?

A The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve
B The ability of a Workload to function correctly and consistently in all expected
C The ability to support development and run workloads effectively
D In terms of the cloud, security is about architecting every workload to prevent

One of the five pillars of the framework for cloud security is ‘Performance Efficiency’. The design principles of Performance Efficiency include:

A Automatically recover from failureTest recovery procedures
B Adopt a consumption model -Measure overall efficiency
C Go Global in minutes -Use serverless architectures
D Apply security at all layers -Automate security best practices

The framework for cloud security consists of five basic components, or pillars. Making small, reversible changes is a design principle of which of these five pillars?

A Reliability
B Performance Efficiency
C Cost Optimization
D Operational Excellence

What are the languages supported for Cloud Templates?

A JSON and YAML
B JSON and Python
C Python and PERL
D YAML and Python

Which is not a responsibility of the Customer?

A Infrastructure Patching and Configuration
B Service, Communication, and Data Security
C Guest OS and Application Patching and Configuration
D Customer Employee Training

Which of the following is the Customer’s Responsibility in the shared responsibility model used in the cloud?

A Customer Employee Training
B Infrastructure Patching
C Physical and Environment Controls
D Infrastructure Configuration

What is vertical scaling?

A Tunes the environment up and down according to the resource capacity needs.
B Tunes the environment by automatically adding or removing resources to the SDN.
C Tunes the environment by manually adding or removing resources to an SDDC.
D Scaling method that does not require a system shutdown to add or remove resources.

The integration of cloud resources into the Security Policy requires establishing a secure connection between:

A The SDDC, CloudGuard Security Gateways, and the Security Management Server.
B The SDDC and CloudGuard Security Gateways.
C The SDDC and the Security Management Server.
D CloudGuard Security Gateways and the Security Management Server.

Adding new Security Gateways as system load increases is an example of:

A Vertical Scaling
B Network Scaling
C Horizontal Scaling
D System Scaling

Which hub serves as the front end of the Workload that permits inbound web communications such as HTTP traffic from the Internet to reach spoke Workloads?

A Web Hub
B Southbound Hub
C East-West Hub
D Northbound Hub

Which of these Cloud Platforms support User Defined Routes (UDR) to force traffic destined for spoke networks to go through a network virtual appliance?

A Amazon AWS
B Google Cloud Platform
C Amazon AWS and Google Cloud Platform
D Microsoft Azure

To travel between spokes, non-transitive traffic uses ________ to allow IPv4 and IPv6 traffic to reach a spoke network.

A a VTI
B the Northbound hub
C the Southbound hub
D Peering

Check Point’s Public Cloud model is described as the following:

A A Security Matrix Model
B A Hub and Spoke Model
C An Advanced Threat Tunnel Model
D A Borderless Network Model

Join Us Among the Stars

156-560Preview

About the 156-560 Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25