CCCS R81.20 156-560 Practice Questions & Answers • ExamPrepare

23 questions in this view

Page 1 of 4

Question 1

What type of traffic passes through the South Hub according to the Cloud Security Blueprint?

East-West traffic between workload spokes and Spokes to Internet (Egress) traffic but traffic between Cloud and on-premise network is not passing through any hub
Only traffic between Cloud and on-premise network for hybrid cloud environments
East-West traffic between workload spokes, Spokes to Internet (Egress) traffic, traffic between Cloud Instances, and on-premise network for hybrid cloud environments
East-West traffic between workload spokes only

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Which architecture model is the best practice for larger Secure Cloud deployments?

Single Gateway
Security Cluster
Mesh Deployment
Hub and Spoke

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic.
It places inspection points between different applications, services, and single hosts within the same network segment.
It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.
Micro-segmentation does not create boundaries.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

CloudGuard IaaS solutions deploy in the cloud using which CSP resources?

PowerShell, Templates, CSP Portal
Scripts, CSP Portal, S3 Buckets
CSP Portal, CLI, PowerShell
Templates, CLI, Buckets

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

When talking with your customer about AWS cloud strategy, the customer advises you the new AWS cloud will be a greenfield environment. What does this mean to you?

Customer is referring to DevOps blue-green deployment where customer deploys new applications to the green environment without affecting the blue environment which is actively serving applications
This means customer will be deploying new cloud resources that will be resilient across the customer's existing datacenter
Customer is changing strategy to include new colocation datacenter
Greenfield means the AWS environment will be all new and built with all new cloud infrastructure, resources and applications

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Which of these are not possible in relation to the Check Point licensing model?

You use a license for CloudGuard AWS you buy at CP (BYOL-Bring your own license)
You use as many CloudGuard licenses as you have virtual cores in the VM (BYOL-Bring your own license)
You use the built-in license from the AWS market (PAYG-Pay As You Go)
You can re-use your existing open server license (BYOL-Bring your own license)

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.