156-561問題集、CheckPoint実際の試験問題

質問 1

How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?

A. It creates borders within the cloud's perimeter to protect the major inbound and outbound traffic intersections.

B. It places inspection points between different applications, services, and single hosts within the same network segment.

C. Micro-segmentation does not create boundaries.

D. It applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic

正解: A

質問 2

Which Pillar includes the following principals?
- Experiment more often
- Go Global in minutes
- Use serverless architectures

A. Performance Efficiency

B. Reliability

C. Cost Optimization

D. Operational Excellence

正解: A

質問 3

What is a Spoke function?

A. To provide a Workload with scalability

B. To provide isolated environments to deploy applications and services

C. To provide a Workload with availability

D. To provide a separate subnet for applications

正解: B

質問 4

What mechanism is used in the Cloud during a ClusterXL fail-over scenario?

A. The Gratuitous ARP mechanism will be used to change the MAC address entry in the ARP cache of the router.

B. Cloud clusters perform failovers by making API calls to the CSP.

C. The Neighbor Discovery protocol will be used to propagate the new cluster node to be forwarded the packets to.

D. The Router Discovery protocol will be used to propagate the new route after a failover scenario.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

Automating CloudGuard Security Gateways involves

A. Clustering Security Gateways based on Load

B. Deploying new Security Gateways based on Load

C. Adding resources to Security Gateways based on Load

D. Changing Security Policy based on Load

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

In a CloudGuard deployment, what does the acronym IAM stand for?

A. Instant Access Management

B. Identity and Access Management

C. IP Address Management

D. Information and Adaptability Measures

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which feature provides flexibility to add/remove CloudGuard Network Security Gateways on demand?

A. Management Extension

B. Hyper Licensing

C. Elastic Licensing

D. Scalable Licensing

正解: C

質問 8

Cloud Security Posture Management (CSPM) operates as which type of service based platform?

A. CaaS

B. PaaS

C. SaaS

D. laaS

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

In CloudGuard, clusters perform failovers by using this technique

A. Datalink Abstraction Protocol (DAP)

B. Gratuitous ARPs (GARP)

C. MAC spoofing

D. API Calls

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 10

Which of the following is the Customer's Responsibility in the shared responsibility model used in the cloud?

A. Customer Employee Training

B. Physical and Environment Controls

C. Infrastructure Patching

D. Infrastructure Configuration

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 11

One of the advantages of deploying Security Gateways in the cloud is:

A. Deploying resources is more expensive.

B. Deploying resources take the same amount of time.

C. Deploying resources takes less time.

D. Deploying resources takes more time.

正解: C

質問 12

What is the name of the Automated Template Deployment System in Azure?

A. Azure CloudFormation Template

B. REST Template for Azure

C. Azure Resource Manager (ARM)

D. Dynamic Formation Template for Azure

正解: C

解説: (PassTest メンバーにのみ表示されます)

CheckPoint Check Point Certified Cloud Specialist - R81.20 (CCCS) - 156-561 模擬練習