최신 156-561 무료덤프 - CheckPoint Check Point Certified Cloud Specialist - R81.20 (CCCS)

A. Terraform

B. CLI

C. Shell

D. CPS Portal

A. If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on

B. The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required

C. The Data Center Object needs to be refreshed in the SmartCansoIe and then a policy install will be required

D. With a property functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator

A. High Availability configurations support only three Security Gateway members

B. VMAC mode is mandatory for all cluster interfaces

C. State synchronization is required and must be done ONLY on a dedicated link

D. High Availability configurations support only two Security Gateway Members

A. You use the built-in license from the AWS market (PAYG-Pay As You Go)

B. You can re-use your existing open server license (BYOL-Bring your own license)

C. You use as many CloudGuard licenses as you have virtual cores in the VM (BYOL-Bring your own license)

D. You use a license for CloudGuard AWS you buy at CP (BYOL-Bring your own license)

A. CME stands for Cloud Monitoring Environment and is a cloud-centric SNMP solution

B. CME is Check Point's Multi-Cloud solution for managing clusters in which nodes are located in two different cloud environments

C. CME is a solution for orchestrating on-premises and cloud workloads with the focus on efficiency

D. East-West traffic between workload spokes, Spokes to Internet (Egress) traffic, traffic between Cloud Instances, and on-premise network for hybrid cloud environments

A. Non-transitive traffic between peered networks

B. Internal spoke to spoke traffic, Spoke to Internet (Egress) traffic, and cloud to on-premises traffic

C. Inbound and customer-facing traffic

D. House the cloud Workloads

A. A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.

B. The Hub and Spoke model is applicable ONLY to multi-cloud environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

C. All traffic that enters and exits each spoke must travel through a hub.

D. All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.

A. Through the regular Check Point channels

B. Via specific dedicated channels

C. At the marketplace

D. Directly with Check Point

A. $FWDIR/scripts/api_status.sh

B. CLISH> show api status

C. api status

D. $FWDIR/scripts/cpm_status.sh -t mapi -s DEBUG

A. The CloudGuard Controller is a logical instance that can decide whether data has to be forwarded to an on-premises server or to a cloud workload.

B. With the CloudGuard Controller, you can configure the security policy to automatically detect changes in datacenters and push these changes directly to the Gateway.

C. The CloudGuard Controller monitors the amount of gateways within a Scale Set.

D. The CloudGuard Controller decides whether to scale EC2 instances horizontally or vertically to meet the pre-defined system load requirements.

A. No. ail the NAT is being done by the ELB

B. Yes, the NAT is only defined for internal LB

C. Yes, you can add public IP's to the Check Point

D. No, the public IPs are defined directly on the in

A. Ansible and Terraform

B. PowerShell Scripts and Bash Scripts

C. VisualBasic scripts and Visual Studio Executables

D. Any kind of Python scripts supporting the helm package manager version 3.0 and above.

A. This is true, however it requires Full Protection access to the Cloud Account to perform automated remediation

B. This is not true because CloudBot applications are used to provide chat service to respond to non-compliance alerts

C. This is not true, Cloud Security Posture Management (CSPIU) can only report non-compliance and cannot remediate by itself

D. This is partially true, however the automated remediation is not done by CloudBot applications but it is done by the Security Management Server

A. CloudGuard laaS Public Cloud

B. CloudGuard SaaS

C. CloudGuard laaS Private Cloud

D. Cloud Security Posture Management