CheckPoint 156-560 CCCS Exam Questions Instant Access

Question 1

Which software blades (Check Point features) are not are not supported in AWS?

AIPS

BVPN blade

CAll Check Point blades are supported

DMobile Access (SSLVPN)

Answer : B

Question 2

The framework for cloud security consists of five basic components, or pillars Making small, reversible changes is a design principle of which of these five pillars

AReliability

BPerformance Efficiency

CCost Optimization

DOperational Excellence

Answer : D

There are five design principles for operational excellence in the cloud:

Perform operations as code

Make frequent, small, reversible changes

Refine operations procedures frequently

Anticipate failure

Learn from all operational failures

Question 3

What is the key component in securing and managing any environment?

ASecurity Management Server

BSecurity Gateway

CSecurity Policy

DSecurity Access

Answer : A

Question 4

When Cloud Security Posture Management discovers non- compliant cloud resources, CloudBot applications perform automated remediation's to correct any violations. How true is this statement?

AThis is true, however it requires Full Protection access to the Cloud Account to perform automated remediation

BThis is not true, Cloud Security Posture Management (CSPIU) can only report non-compliance and cannot remediate by itself

CThis is partially true, however the automated remediation is not done by CloudBot applications but it is done by the Security Management Server

DThis is not true because CloudBot applications are used to provide chat service to respond to non-compliance alerts

Answer : A

Question 5

How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?

APer usage

BPer Socket

CPer vCore

DPer Gateway

Answer : C

Question 6

The best practice for CloudGuard Network deployments utilizes the Hub and Spokes

Model. Which of these statements is the most correct for this model.

AAll the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

BA Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

CAll traffic that enters and exits each spoke must travel through a hub

DThe Hub and Spoke model is applicable ONLY to multi-cloud
environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

Answer : A

Question 7

One of the five pillars of the framework for cloud security is 'Performance Efficiency'. The design principles of Performance Efficiency include:

AAutomatically recover from failure
Test recovery procedures

BAdopt a consumption model -
Measure overall efficiency

CGo Global in minutes -
Use serverless architectures

DApply security at all layers -
Automate security best practices

Answer : C

erformance Efficiency

* The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand chandes and technologies evolve

* Design Priniciples:

> Democratize advanced technologies

> Go Global in minutes

> Use serverless architectures

> Experiment ore often

> Consider mechanical sympathy

CheckPoint Check Point Certified Cloud Specialist 156-560 CCCS Exam Questions