Black Friday Special Limited Time Flat 70% Discount offer - Ends in 0d 00h 00m 00s - Coupon code: 70spcl

Checkpoint 156-560 Check Point Certified Cloud Specialist (CCCS) Exam Practice Test

Page: 1 / 8
Total 83 questions

Check Point Certified Cloud Specialist (CCCS) Questions and Answers

Question 1

The best practice for CloudGuard Network deployments utilizes the Hub and Spokes

Model. Which of these statements is the most correct for this model.

Options:

A.

All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

B.

A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

C.

All traffic that enters and exits each spoke must travel through a hub

D.

The Hub and Spoke model is applicable ONLY to multi-cloud

environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

Question 2

Cloud Security Posture Management uses CloudBots to assist with________________.

Options:

A.

cloud account configurations and data flows

B.

securing IAM account credentials.

C.

identifying where the organization's security posture need:

D.

automatic compliance remediation

Question 3

What is Cloud Security according to the Five Pillars?

Options:

A.

The ability to support development and run workloads effectively

B.

The ability of a Workload to function correctly and consistently in all expected

C.

The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demands changes and technologies evolve

D.

In terms of tie cloud, security is about architecting every workload to prevent

Question 4

When choosing PAYG (Pay As You Go) licensing in AWS, it is provided:

Options:

A.

Via specific dedicated channels

B.

Directly with Check Point

C.

At the marketplace

D.

Through the regular Check Point channels

Question 5

Which of these Cloud Platforms support User Defined Route (UDR) to force traffic destined for spoke networks to go through a network virtual appliance

Options:

A.

Amazon AWS

B.

Google Cloud Platform

C.

Amazon AWS and Google Cloud Platform

D.

Microsoft Azure

Question 6

Which function do Load Balancers perform?

Options:

A.

Trigger capacity on security gateways

B.

To secure balance between private and public cloud

C.

Direct internet traffic to spoke networks

D.

Restrict traffic loads between servers

Question 7

In a CloudGuard deployment, what does the acronym IAM stand for?

Options:

A.

Information and Adaptability Measures

B.

IP Address Management

C.

Identity and Access Management

D.

Instant Access Management

Question 8

What are the languages supported for Cloud Templates?

Options:

A.

JSON and YAML

B.

JSON and Python

C.

Python and PERL

D.

YAML and Python

Question 9

What are the Automation tools?

Options:

A.

API, CLI, Scripts, Shells and Templates

B.

Terraform and Ansible

C.

AMls

D.

CloudFormation

Question 10

Which solution delivers a software platform for public cloud security and compliance orchestration?

Options:

A.

CloudGuard Network Public

B.

CloudGuard Network Private

C.

CloudGuard SaaS

D.

Cloud Security Posture Management

Question 11

To travel between spokes, non-transitive traffic uses ________ to allow Ipv4 and IPv6 traffic to reach a spoke network

Options:

A.

a VTI

B.

the Northbound hub

C.

the Southbound hub

D.

Peering

Question 12

Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premises equipment, scripts, orchestration playbooks and CloudGuard Network cloud resources, on- premise equipment, scripts.

Options:

A.

CloudGuard Management Extension API (CME-API)

B.

CloudGuard Controller API (CG-API)

C.

Representational State Transfer (REST) APIs

D.

Cloud Security Posture Management (CSPM)

Page: 1 / 8
Total 83 questions