[UPDATED] CheckPoint 156-561 Certification Exam Questions
Quickly and Easily Pass CheckPoint Exam with 156-561 real Dumps
NEW QUESTION # 66
Introduction to Cloud Security Posture Management uses which of the following to connect, communicate, and collect information from cloud accounts and third party tools?
- A. APIs
- B. CLI
- C. HTML
- D. SmartConsole
Answer: A
Explanation:
NEW QUESTION # 67
Which security principles are indicative of the CloudGuard Secure Public Cloud Blueprint architecture?
- A. Security with Advanced Threat Prevention: Network Segmentation: Agility, Automation Efficiency, and Elasticity; Borderless
- B. Security with Advanced Threat Protocol; Network Distribution; Agility, Automation, Efficiency, and Cloud Rigidity Borderless
- C. Security with Advanced Threat Prevention; Network Division; Agility, Automation, Efficiency, and Elasticity; with Cloud Borders
- D. Security with Advanced Threat Prevention Network Unification Agility Automation, Efficiency, and Elasticity; Borderless
Answer: C
NEW QUESTION # 68
When choosing PAYG (Pay As You Go) licensing in AWS, it is provided:
- A. Directly with Check Point
- B. Through the regular Check Point channels
- C. At the marketplace
- D. Via specific dedicated channels
Answer: C
NEW QUESTION # 69
Which of these is an example of Control Connections as accepted with implicit rules enabled from Global Properties?
- A. Any TCP or UDP communication from the Primary SMS to any managed Security Gateway.
- B. Cluster Control Protocol (CCP) communication between members of a Security Gateway Cluster.
- C. Communication with various types of servers, such as RADIUS, CVP, UFP, TACACS, LDAP and logical servers, even if these servers are not specifically defined resources in your Security Policy.
- D. Communication using any protocol that can be used to control a remote host machine e.g.SSH, Telnet, RDP, etc.
Answer: C
Explanation:
The Control Connections enabled by the "Accept control connections" property in "Global Properties" (located in the "Policy" menu in SmartDashboard) are listed below:
Extranet connections
FWD connections
OPSEC connections (..allow UFP (TCP port 18182) from local machine to UFP servers.
allow CVP (TCP port 18181) from local machine to CVP servers.)
NEW QUESTION # 70
When it comes to the autoscaling method, which statement is true?
- A. It helps with CloudGuard IaaS deployments.
- B. It is configured easily without rules.
- C. It works best with small-scale deployments.
- D. It functions with pre-provisioning.
Answer: A
NEW QUESTION # 71
Which software blades (Check Point features) are not are not supported in AWS?
- A. VPN blade
- B. All Check Point blades are supported
- C. IPS
- D. Mobile Access (SSLVPN)
Answer: A
NEW QUESTION # 72
One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that:
- A. High Availability configurations support only three Security Gateway members
- B. High Availability configurations support only two Security Gateway Members
- C. State synchronization is required and must be done ONLY on a dedicated link
- D. VMAC mode is mandatory for all cluster interfaces
Answer: B
NEW QUESTION # 73
What is the key component in securing and managing any environment?
- A. Security Management Server
- B. Security Access
- C. Security Gateway
- D. Security Policy
Answer: A
NEW QUESTION # 74
Which appliance type does the Check Point management control with a single policy?
- A. Physical
- B. Physical and Cloud
- C. Physical, Virtual and Cloud
- D. Virtual and Cloud
Answer: C
NEW QUESTION # 75
What is public cloud?
- A. Computing environment dedicated to one company
- B. A shared computing environment
- C. Computing environment located over the internet
- D. Computing environment with limited resources
Answer: D
NEW QUESTION # 76
Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?
- A. The web browser used to run the template was not compatible
- B. The template used was for some cloud platform other than AWS
- C. The Security Management Server that will be managing the Security Gateway had a lower version
- D. The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions
Answer: B
NEW QUESTION # 77
Security Management Servers deployed in a cloud environment can manage which of the following gateways?
- A. Only CloudGuard IaaS Security Gateways
- B. Physical Security Gateways and CloudGuard IaaS Security Gateways
- C. Only Security Gateways with the CloudGuard Controller installed
- D. On-Prem Security Gateways and CloudGuard IaaS Security Gateways on multiple CSP's
Answer: D
NEW QUESTION # 78
What do Workloads require to automate processes?
- A. API
- B. Shell
- C. CSP Portal
- D. CLI
Answer: A
Explanation:
To effectively enable automation, it needs to be trusted. Trust-based APIs enable self-service integrations with third-party systems and automate policy changes within the scope of their privileges.
NEW QUESTION # 79
The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model. Which of these statements is the most correct for this model.
- A. All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.
- B. The Hub and Spoke model is applicable ONLY to multi-cloud
- C. All traffic that enters and exits each spoke must travel through a hub
- D. A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.
Answer: A
NEW QUESTION # 80
What platform provides continuous compliance and governance assessments that evaluate public infrastructure according to industry to industry standards and best practices?
- A. CloudGuard SaaS
- B. CloudGuard laaS Private Cloud
- C. Cloud Security Posture Management
- D. CloudGuard laaS Public Cloud
Answer: D
NEW QUESTION # 81
......
Start your 156-561 Exam Questions Preparation: https://protechtraining.actualtestsit.com/CheckPoint/156-561-exam-prep-dumps.html