CheckPoint 156-560 CCCS Exam Practice Test Instant Access

Question 1

Can you configure Micro segmentation (control traffic inside a subnet) on Azure?

ANo. Micro segmentation is not supported on Azure

BYes. via UDR

CYes, via System Routes

DYes, via routes on vNet

Answer : C

Question 2

In a CloudGuard deployment, what does the acronym IAM stand for?

AInformation and Adaptability Measures

BIP Address Management

CIdentity and Access Management

DInstant Access Management

Answer : C

Question 3

What is Performance Efficiency?

AThe ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve

BThe ability to support development and run workloads effectively

CIn terms of the cloud, security is about architecting every workload to prevent

DThe ability of a Workload to function correctly and consistently in all expected
The Performance Efficiency pillar includes the ability to use computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve. You can find prescriptive guidance on implementation in thePerformance Efficiency Pillar whitepaper.

Answer : A

Question 4

The best practice for CloudGuard Network deployments utilizes the Hub and Spokes

Model. Which of these statements is the most correct for this model.

AAll the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

BA Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

CAll traffic that enters and exits each spoke must travel through a hub

DThe Hub and Spoke model is applicable ONLY to multi-cloud
environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

Answer : A

Question 5

What is vertical scaling?

ATunes the environment up and down according to the resource capacity needs

BTunes the environment by automatically adding or removing resource to the SDN

CTunes the environment by manually adding or removing resource to an SDDC

DScaling method that does not require a system shutdown to add or remove resources.

Answer : A

Question 6

Adaptive Security Policies allow the deployment of new cloud based resources without

AChanging the cloud environment

BPaying for new resources

CInstalling New Policies

DInstalling New Applications

Answer : C

Question 7

Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premises equipment, scripts, orchestration playbooks and CloudGuard Network cloud resources, on- premise equipment, scripts.

ACloudGuard Management Extension API (CME-API)

BCloudGuard Controller API (CG-API)

CRepresentational State Transfer (REST) APIs

DCloud Security Posture Management (CSPM)

Answer : A

CheckPoint 156-560 Check Point Certified Cloud Specialist CCCS Exam Practice Test