CheckPoint 156-561 Practice Exam - 209 Unique Questions
Latest Questions 156-561 Guide to Prepare Free Practice Tests
NEW QUESTION # 85
What are two basic rules Check Point recommends for building an effective policy?
- A. Cleanup and Stealth Rule
- B. Access and Identity Rules
- C. VPN and Admin Rules
- D. Implicit and Explicit Rules
Answer: A
Explanation:
Best Practice - These are basic Access Control rules we recommend for all Rule Bases:
Stealth rule that prevents direct access to the Security Gateway.
Cleanup rule that drops all traffic that is not matched by the earlier rules in the policy.
NEW QUESTION # 86
In CloudGuard, clusters perform failovers by using this technique
- A. API Calls
- B. MAC spoofing
- C. Gratuitous ARPs (GARP)
- D. Datalink Abstraction Protocol (DAP)
Answer: B
Explanation:
In CloudGuard, clusters perform failovers using MAC spoofing. This technique allows the new cluster member to assume the MAC address of the failed node, enabling traffic to continue flowing without interruption. Unlike traditional methods like Gratuitous ARP (GARP), which might not work in cloud environments, MAC spoofing ensures seamless failover in virtualized or cloud environments.
NEW QUESTION # 87
One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that:
- A. High Availability configurations support only two Security Gateway Members
- B. High Availability configurations support only three Security Gateway members
- C. VMAC mode is mandatory for all cluster interfaces
- D. State synchronization is required and must be done ONLY on a dedicated link
Answer: A
NEW QUESTION # 88
What is an alternative method to double NAT in Azure?
- A. User Defined Routes
- B. Peering
- C. System Routes
- D. Scaling
Answer: A
NEW QUESTION # 89
Which cloud components specify the Workloads associated with traffic and tell load balancers which Workloads are members of the same group?
- A. Dynamic assignment
- B. Health Checks
- C. Listening Rules
- D. Target Groups
Answer: D
Explanation:
After the load balancer receives a request, it evaluates the listener rules in priority order to determine which rule to apply, and then selects a target from the target group for the rule action.
You can configure listener rules to route requests to different target groups based on the content of the application traffic.
NEW QUESTION # 90
What is public cloud?
- A. A shared computing environment
- B. Computing environment with limited resources
- C. Computing environment dedicated to one company
- D. Computing environment located over the internet
Answer: D
NEW QUESTION # 91
What are the methods to deploy a Check Point security Gateway on Azure?
- A. PowerShell + Azure Security Center
- B. Azure Security Center + Azure Portal (ARM)
- C. Azure Portal (ARM)
- D. PowerShell + Azure Portal (ARM)
Answer: D
NEW QUESTION # 92
What log file can you check to help with troubleshooting an AWS Cluster failover issue?
- A. $FWDIR/log/fw.log
- B. /var/log/cloud_config.log
- C. $FWDIR/log/aws_had.elg
- D. /var/log/CPcme/cme.log
Answer: C
Explanation:
In the event of an AWS Cluster failover issue, you can check the aws_had.elg log file located in
$FWDIR/log/. This log file contains useful information related to the High Availability Daemon (HAD) in a CloudGuard cluster, which is responsible for managing cluster failovers and state synchronization. It provides detailed insights into any issues occurring during the failover process.
NEW QUESTION # 93
Elastic licensing tracks licenses by counting the number of:
- A. Management Servers
- B. Security Gateways
- C. Virtual Cores in Use
- D. Application Servers
Answer: C
NEW QUESTION # 94
What is the Cloud Management Extension used for?
- A. Cloud logging
- B. Managing autoscaling gateways
- C. Importing objects from the cloud
- D. Deploying hotfixes
Answer: B
Explanation:
The Cloud Management Extension (CME) is used for managing autoscaling gateways in cloud environments. It helps automate the deployment, scaling, and management of security gateways in cloud environments, ensuring they scale dynamically based on the cloud resources and workload demands. CME integrates with cloud environments like AWS, Azure, and others to optimize security and network management.
NEW QUESTION # 95
CloudGuard uses what language to script API instructions?
- A. C++
- B. Java
- C. Fortran
- D. JSON
Answer: D
Explanation:
CloudGuard uses JSON (JavaScript Object Notation) to script API instructions. JSON is a lightweight, easy-to-read format commonly used for representing data structures and exchanging information between systems, making it ideal for API communication and scripting tasks in CloudGuard.
NEW QUESTION # 96
When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?
- A. 1. Verify process is running with 'cloudguard on' and 2. restart the api process with 'api restart'
- B. 1. Reboot the Security Management Server and 2. restart the cloudguard process with 'cloudguard on'
- C. 1. Verify process is running with 'cloudguard on' and 2. 'test communication' button the Data Center Server object
- D. 1. Reboot the Security Management Server and 2. restart the api process with 'api restart'
Answer: C
NEW QUESTION # 97
Which of the following is a common limitation of cloud platforms?
- A. Custom Route Tables
- B. Network address translations
- C. Packet Forwarding
- D. Identity and Access Management
Answer: C
NEW QUESTION # 98
When using system routes and user defined routes in Azure, which takes precedent?
- A. The system route always takes precedent
- B. The most specific route takes precedent
- C. The user defined route takes precedent
- D. The newest route takes precedent
Answer: B
NEW QUESTION # 99
Which utility allows integration between the Check Point Security Management Server, the CloudGuard Network solution, and the CSPs?
- A. Elastic Licensing
- B. CloudGuard Management Extension
- C. Maestro
- D. CloudGuard Controller
Answer: B
Explanation:
CME is a tool that runs on Check Point's Security Management Server and Multi-Domain Servers running Gaia OS. CME allows cloud native integration between Check Point CloudGuard IaaS solutions and Cloud platforms.
As a Service that runs on Check Point Management Servers, it continuously monitors CloudGuard IaaS solutions deployed in different cloud vendors and synchronizes them with the Security Management Server.
NEW QUESTION # 100
Logging Implied rules, enabling Hit Count and defining advanced VPN functions are all settings that are applied as
- A. Policy Settings
- B. Global Properties
- C. Gateway Properties
- D. Inline Layer
Answer: B
NEW QUESTION # 101
How many AWS Internet gateways can you define in AWS?
- A. One per Region
- B. Unlimited
- C. Two per VPC
- D. One per VPC
Answer: D
NEW QUESTION # 102
What file format is used for Azure templates?
- A. SGML
- B. Python
- C. YAML
- D. JSON
Answer: D
Explanation:
Azure templates, specifically Azure Resource Manager (ARM) templates, are defined in JSON (JavaScript Object Notation) format. This format is used to describe the resources, configurations, and deployments in Azure, enabling infrastructure as code for consistent and automated resource provisioning.
NEW QUESTION # 103
Cloud Security Posture Management uses which one of the following to integrate with cloud accounts?
- A. IAM account credentials
- B. Security Objects
- C. SDDC
- D. CloudGuard Controller
Answer: A
NEW QUESTION # 104
......
Correct and Up-to-date CheckPoint 156-561 BrainDumps: https://www.practicedump.com/156-561_actualtests.html
Reliable 156-561 Dumps Questions Available as Web-Based Practice Test Engine: https://drive.google.com/open?id=1Fta0_ioOLfYYQuw6be76lS96TBhvkPqU