Pass the Checkpoint CCCS 156-560 Questions and answers with CertsForce

Viewing page 2 out of 3 pages
Viewing questions 11-20 out of questions
Questions # 11:

The ability to support development and run workloads effectively is commonly called:

Options:

A.

Performance Efficiency


B.

Cost Optimization


C.

Operational Excellence


D.

Reliability


Expert Solution
Questions # 12:

When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?

Options:

A.

1. Verify process is running with ‘cloudguard on’ and 2. restart the api process with ‘api restart’


B.

1. Verify process is running with ‘cloudguard on’ and 2. ‘test communication’ button the Data Center Server object


C.

1. Reboot the Security Management Server and 2. restart the cloudguard process with ‘cloudguard on’


D.

1. Reboot the Security Management Server and 2. restart the api process with ‘api restart’


Expert Solution
Questions # 13:

In a CloudGuard deployment, what does the acronym IAM stand for?

Options:

A.

Information and Adaptability Measures


B.

IP Address Management


C.

Identity and Access Management


D.

Instant Access Management


Expert Solution
Questions # 14:

Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?

Options:

A.

The Security Management Server that will be managing the Security Gateway had a lower version


B.

The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions


C.

The template used was for some cloud platform other than AWS


D.

The web browser used to run the template was not compatible


Expert Solution
Questions # 15:

Can you configure NAT for internal VM's on the Check Point Gateway in AWS?

Options:

A.

Yes, you can add public IP's to the Check Point


B.

No. ail the NAT is being done by the ELB


C.

No, the public IPs are defined directly on the in


D.

Yes, the NAT is only defined for internal LB


Expert Solution
Questions # 16:

Why is an IAM role created when installing a cluster on AWS?

Options:

A.

In order to perform cluster related changes


B.

It is created for the installation process only, it gets deleted


C.

IAM role is created for auditing purposes


D.

IAM role is not created


Expert Solution
Questions # 17:

How does the Cloud Security Posture Management (CSPM) service deliver intelligence threat feeds, enforce compliance policies, and apply security enhancement to the environment.

Options:

A.

The Cloud Security Posture Management (CSPM) does this by using the SOAP protocol and XML


B.

The Cloud Security Posture Management (CSPM) does this by .usingSSH and microagents


C.

The Cloud Security Posture Management (CSPM) does this by using REST APIs


D.

The Cloud Security Posture Management (CSPM) does this by using SIC connections on the cloud


Expert Solution
Questions # 18:

Cloud Security Posture Management uses CloudBots to assist with________________.

Options:

A.

cloud account configurations and data flows


B.

securing IAM account credentials.


C.

identifying where the organization's security posture need:


D.

automatic compliance remediation


Expert Solution
Questions # 19:

Introduction to Cloud Security Posture Management uses which of the following to connect, communicate, and collect information from cloud accounts and third party tools?

Options:

A.

SmartConsole


B.

HTML


C.

CLI


D.

APIs


Expert Solution
Questions # 20:

What can a Security Admin do in a situation where collecting additional log file information to examine a CloudGuard Controller issue is required?

Options:

A.

Execute a debug on the SMS


B.

Set the operation to TRACE to collect more data.


C.

Verify connectivity between the SMS and the SDDC.


D.

Search for the information in the objects database.


Expert Solution
Viewing page 2 out of 3 pages
Viewing questions 11-20 out of questions