Quiz
CCCS V3
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (61)
1When choosing PAYG (Pay As You Go) licensing in AWS, it is provided:
- AVia specific dedicated channels
- BDirectly with Check Point
- CAt the marketplace
- DThrough the regular Check Point channels
2What are the two authentication methods supported by Azure data center objects?
- ACheck Point username/password and Service Principal
- BAzure AD username/password and Service Principal
- CAzure Service principal and management certificate
- DCheck Point username/password and Azure AD username/password
3Which software blades (Check Point features) are not supported in AWS?
- AIPS
- BVPN blade
- CAll Check Point blades are supported
- DMobile Access (SSLVPN)
4According to best practices what would be the best way to install a Check Point cluster on AWS?
- AFollowing the instruction from the relevant Check Point SK
- BWith PowerShell
- CFrom AWS Console
- DFrom AWS Market Place
5What does VPC stands for in AWS?
- AVideo Player Controller
- BValid Public Cloud
- CVirtual Private Cloud
- DVirtual Protected Cluster
6Can you configure Micro segmentation (control traffic inside a subnet) on Azure?
- ANo, Micro segmentation is not supported on Azure
- BYes, via UDR
- CYes, via System Routes
- DYes, via routes on vNet
7On AWS, EC2 stands for:
- AElastic Compute Cloud
- BExtended Cloud Computing
- CExtend Cloud Company
- DElastic Cloud
8What does AMI stand for in AWS?
- AAmazon Mastered Internet
- BAmazon Machine Infrastructure
- CAmazon Machine Image
- DAmazon Model Instance
9An AWS virtual network is called a:
- AAmazon Private Cloud (APC)
- BVirtual Public Network (VPN)
- CVirtual Private Cloud (VPC)
- DVirtual Cloud Computing (VCC)
10In Amazon Web Services, what is the level of segmentation you can achieve?
- AVPC to VPC only
- BVPC to VPC and VM to VM (micro segmentation)
- CInternet to VPC, VPC to VPC and Subnet to Subnet
- DVM to VM (micro segmentation) and Internet to VPC
11Can you change the Check Point prepared solution templates for Azure to fit your needs?
- AYes you can
- BYes but only the number vNics
- CNo, Check Point policy forbids the change of the templates
- DNo, altering the solution template is forbidden by Azure
12On Azure, can you deploy a Check Point Standalone installation (Management + GW)?
- ANo, it is not supported
- BYes, via GitHub only
- CYes, via PowerShell only
- DYes, via solution template / PowerShell / Marketplace
13The ability to support development and run workloads effectively is commonly called:
- APerformance Efficiency
- BCost Optimization
- COperational Excellence
- DReliability
14Which is not a responsibility of the CSP (Cloud Service Provider)?
- AInfrastructure Patching and Configuration
- BPhysical and Environment Controls
- CData
- DCSP Employee Training
15What is Performance Efficiency?
- AThe ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve
- BThe ability to support development and run workloads effectively
- CIn terms of the cloud, security is about architecting every workload to prevent
- DThe ability of a Workload to function correctly and consistently in all expected
16Which Pillar includes the following principals:
*Experiment more often
*Go Global in minutes.
*Use serverless architectures.- AReliability
- BCost Optimization
- CPerformance Efficiency
- DOperational Excellence
17Which of the following is a common limitation of cloud platforms?
- ANetwork address translations
- BCustom Route Tables
- CIdentity and Access Management
- DPacket Forwarding
18Automatically adding or removing cloud instances based on load is called:
- AHorizontal Scaling
- BSuper Scaling
- CHyper Scaling
- DVertical Scaling
19CloudGuard IaaS solutions deploy in the cloud using which CSP resources?
- AScripts, CSP Portal, S3 Buckets
- BTemplates, CLI, Buckets
- CCSP Portal, CLI, PowerShell
- DPowerShell, Templates, CSP Portal
20Elastic licensing tracks licenses by counting the number of:
- ASecurity Gateways
- BApplication Servers
- CManagement Servers
- DVirtual Cores in Use
21Which feature provides flexibility to add/remove CloudGuard Network Security Gateways on demand?
- AManagement Extension
- BScalable Licensing
- CHyper Licensing
- DElastic Licensing
22Which autoscaling method requires the VM to temporarily shut down while it processes system modifications?
- ABoth Vertical and Horizontal Scaling
- BVertical Scaling
- CHorizontal Scaling
- DNeither autoscaling method requires the VM to shutdown.
23Which Security Gateway function inspects cloud applications and workload resources for malicious activity?
- AApplication Control
- BThreat Prevention
- CIdentity Awareness
- DAccess Control
24Which is not a deployment method for CloudGuard solutions using CSP resources?
- ATerraform
- BShell
- CCLI
- DCPS Portal
25One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that
- AState synchronization is required and must be done ONLY on a dedicated link
- BHigh Availability configurations support only two Security Gateway members
- CHigh Availability configurations support only three Security Gateway members
- DVMAC mode is mandatory for all cluster interfaces
26What is required to route transit traffic in the Southbound hub?
- ANothing
- BPeering
- CVTI (VPN Tunnel Interface)
- DUser Defined Routes
27What can Data Center Objects represent?
- AvNets, VPCs or Network Security Groups
- BCompute, Regions or Availability Zones
- CPublic IP, Private IP, NAT or IAM roles
- DCloud Data Center, Tags, subnets, or hosts
28What is the key component in securing and managing any environment? 👀⁉
- ASecurity Management Server
- BSecurity Gateway
- CSecurity Policy
- DSecurity Access
29Security administrators may import data center objects into the rulebase using the following options:
- APublic and private views
- BCloudGuard view
- CUsing logs only
- DRegion View, Tags, View, Search View
30Which of these is true of the CloudGuard Controller?
- ACloudGuard Controller manually updates Smartconsole, security logs, and API connections.
- BCloudGuard Controller only displays cloud-based Security Gateway objects.
- CCloudGuard Controller maintains visibility of the protected cloud environment.
- DCloudGuard Controller statically identifies cloud resources created within a single cloud or a multi-cloud environment.
31Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?
- AThe Security Management Server that will be managing the Security Gateway had a lower version
- BThe specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions
- CThe template used was for some cloud platform other than AWS
- DThe web browser used to run the template was not compatible
32Which command will enable the CloudGuard Controller services on the Security Management Server?
- Aset cgcontroller state on
- Bcontroller on
- Cset cgcontroller on
- Dcloudguard on
33Which CloudGuard security platform enables organizations to view and access their security posture, find cloud misconfigurations, and enforce best practices?
- ACloudGuard IaaS Private Cloud Solution
- BCloudGuard SaaS
- CCloudGuard Security Posture Management
- DCloudGuard IaaS Public Cloud Solution
34Which of these operations will delete all inbound and outbound rules in a Security Group?
- ARegion Lock
- BRule Lock
- CFull Protect Lock
- DPolicy Lock
35Introduction to Cloud Security Posture Management uses which of the following to connect, communicate, and collect information from cloud accounts and third party tools?
- ASmartConsole
- BHTML
- CCLI
- DAPIs
36What are the methods to deploy a Check Point security Gateway on Azure? revisar respuestas desde aqui
- APowerShell + Azure Portal (ARM)
- BPowerShell + Azure Security Center
- CAzure Portal (ARM)
- DAzure Security Center + Azure Portal (ARM)
37Which appliance type does the Check Point management control with a single policy?
- APhysical
- BPhysical, Virtual and Cloud
- CPhysical and Cloud
- DVirtual and Cloud
38Deploying CloudGuard IaaS security solutions involves which process?
- AOne that launches virtual machines quickly
- BOne that quickly enables network configuration
- COne that creates threat prevention boundaries
- DMoving hardware to another SDN
39What is public cloud?
- AComputing environment with limited resources
- BComputing environment located over the internet
- CA shared computing environment
- DComputing environment dedicated to one company
40What MS Azure feature needs to be configured to allow traffic to the gateway?
- AUser defined routes
- BSource/Destination Check
- CIP Forwarding
- DIP Check
41How is CloudGuard for Azure licensed in PAYG (Pay As You Go) mode? Revisar respuesta
- APer hour based on resources consumed
- BPer Gateway
- CPer Socket
- DPer vCore
42One of the advantages of deploying Security Gateways in the cloud is:
- ADeploying resources is more expensive.
- BDeploying resources takes more time.
- CDeploying resources takes less time.
- DDeploying resources take the same amount of time.
43Can you deploy a gateway with only one NIC on azure with full functionality?
- AYes, you can deploy with 1 NIC but only for Auto scaling use cases
- BYes, this deployment scenario is fully supported
- CNo, you must deploy a gateway with NIC on every internal subnet
- DNo, a gateway on Azure have to be deployed with at least 2 NIC's
44When designing a cloud deployment, what are the five pillars of a Secure Cloud Environment that must be balanced?
- AOperational Excellence, Security, Reliability, Performance Efficiency, and Cost Optimization
- BOperational Efficiency, Cost Reliability, Redundancy, Protection, and Performance
- COperational Redundancy, Security, Performance Excellence, Reliability, and Cost Efficiency
- DOperational Optimization, Security, Redundancy, Performance Excellence, and Cost Efficiency
45When it comes to the autoscaling method, which statement is true?
- AIt is configured easily without rules.
- BIt works best with small-scale deployments.
- CIt helps with CloudGuard IaaS deployments.
- DIt functions with pre-provisioning.
46CloudGuard uses several management tools to create and manage Security Policies. Which is NOT one of those tools? 👀⁉
- AGaia Portal
- BCloudGuard Controller
- CSmartConsole
- DCLI
47Which is not an advantage of the Hub and Spoke Architecture Model?
- AAutomation
- BNetwork Segmentation
- CComplexity
- DBorderless
48What is a Spoke function?
- ATo provide isolated environments to deploy applications and services
- BTo provide a separate subnet for applications
- CTo provide a Workload with availability
- DTo provide a Workload with scalability
49Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premise equipment, scripts, orchestration playbooks, and CloudGuard Network
- ACloudGuard Management Extension API (CME-API)
- BCloudGuard Controller API (CG-API)
- CRepresentational Slate Transfer (REST) APIs
- DCloud Security Posture Management (CSPM) API
50Which rules are created in the Rulebase by the administrator, and are configured to allow or block traffic based on specified criteria?
- Aimplicit
- Bdefault
- CExplicit
- Dimplied
51Which applications perform the following automated remediations:
- Encrypt databases
- Rotate encryption keys
- Force password changes
- Quarantine instances- APosture Correction Script - pc-script.sh
- BCloudBots
- CAutoRemed Java Applets
- DCorrection Servlets
52Why is an IAM role created when installing a cluster on AWS?
- AIn order to perform cluster related changes
- BIt is created for the installation process only, it gets deleted afterwards
- CIAM role is created for auditing purposes
- DIAM role is not created
53Auto Scaling is supported by Check Point on which two cloud platforms?
- AGoogle Cloud & Azure
- BAzure & AWS
- CvCloudAir & Azure
- DAWS & Google Cloud & NSX
54Which deployment methods are allowed on Azure?
- AAuto-scale, Single Gateway
- BSingle Gateway, Cluster, Auto-Scale
- CCluster, Auto-scale
- DSingle Gateway, Cluster
55When using system routes and user defined routes in Azure, which takes precedent?
- AThe user defined route takes precedent
- BThe system route always takes precedent
- CThe most specific route takes precedent
- DThe newest route takes precedent
56How does micro-segmentation create boundaries and provide network segmentation for CloudGuard?
- AIt creates borders within the cloud’s perimeter to protect the major inbound and outbound traffic intersections.
- BMicro-segmentation does not create boundaries.
- CIt applies a Security Gateway that enforces firewall policies to accept legitimate network traffic flows and deny unauthorized traffic.
- DIt places inspection points between different applications, services, and single hosts within the same network segment.
57Which of the below are not possible in relation to the Check Point licensing model?
- AYou can re-use your existing open server license (BYOL-Bring your own license)
- BYou use the built-in license from the AWS market (PAYG-Pay As You Go)
- CYou use as many CloudGuard licenses as you have virtual cores in the VM (BYOL-Bring your own license)
- DYou use a license for CloudGuard AWS you buy at CP (BYOL-Bring your own license)
58Which is not a deployment method for CloudGuard solutions using
- ATerraform
- BShell
- CCLI
- DCPS Portal
59The Administrators ability to protect data, systems, and assets While taking advantage of cloud
technologies is commonly called- ACost Optimization
- BSecurity
- COperational Excellence
- DPerformance Efficiency
60Adaptive Security Policies allow the deployment of new cloud based resources without
- AChanging the cloud environment
- BPaying for new resources
- CInstalling New Policies
- DInstalling New Applications
61What is the CloudGuard solution?
- ACheck Point solution for private and public cloud
- BCheck Point solution for public cloud
- CCheck Point solution for private cloud
- DCheck Point virtual gateway
Informações
- Descrição
- Quiz sobre CCCS V3, criado por Carlos Velas em 16-06-2025.
- Autor
- Carlos Velas
- Idioma
- Español
- Visualizações
- 2
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz