最新の156-561学習ガイド2026年最新の- 提供するのはテストエンジンとPDF
最新版を今すぐ試そう156-561練習テスト問題解答が待ってます
質問 # 51
Cloud Security Posture Management uses which of the following to integrate with cloud accounts?
- A. Security Objects
- B. SDDC
- C. IAM account credentials
- D. CloudGuard Controller
正解：C
質問 # 52
Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?
- A. $FWDIR/logs/cloud_controller.elg
- B. $CPDIR/logs/cloud.elg
- C. $FWDIR/logs/cloud_proxy.elg
- D. $DADIR/logs/controller_proxy.elg
正解：C
質問 # 53
One of the limitations in deploying Check Point CloudGuard Cluster High Availability is that:
- A. High Availability configurations support only three Security Gateway members
- B. State synchronization is required and must be done ONLY on a dedicated link
- C. VMAC mode is mandatory for all cluster interfaces
- D. High Availability configurations support only two Security Gateway Members
正解：D
質問 # 54
How is CloudGuard for Azure licensed in BYOL (Bring your own license) mode?
- A. Per Gateway
- B. Per Socket
- C. Per vCore
- D. Per usage
正解：C
質問 # 55
Which command will enable the CloudGuard Controller services on the Security Management Server
- A. set cgcontroller state on
- B. controller on
- C. cloudguard on
- D. set cgcontroller on
正解：C
質問 # 56
Which one of the following is part of the Orchestration Playbook process for creating a new spoke and an automated Security Gateway?
- A. An event trigger
- B. Transfer of resources to a VPN
- C. Vertical scaling
- D. Communication with the OS
正解：B
質問 # 57
How is CloudGuard for Azure licensed in PAYG (Pay As You Go) mode?
- A. Per Gateway
- B. Per Socket
- C. Per hour based on resources consumed
- D. Per vCore
正解：C
解説：
質問 # 58
What is public cloud?
- A. A shared computing environment
- B. Computing environment with limited resources
- C. Computing environment dedicated to one company
- D. Computing environment located over the internet
正解：B
質問 # 59
REST is an acronym for the following
- A. Real Security Threat
- B. Representational State Transfer
- C. Really Efficient Security Template
- D. Representation of Security Traffic
正解：B
解説：
The abbreviation REST stands for "Representational State Transfer" and refers to a software architectural style. It is based on six principles that describe how networked resources are defined and addressed on the web, for example in a cloud.
質問 # 60
An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it's IP address, how will the change be effected on the Security Gateway
- A. If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on
- B. The Data Center Object needs to be refreshed in the SmartCansoIe and then a policy install will be required
- C. With a property functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator
- D. The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required
正解：C
解説：
質問 # 61
Where are the api logs found on the Security Management Server?
- A. $FWDIR/Iog/api.elg
- B. /var/log/api.elg
- C. /var/tmp/api.elg
- D. /opt/log/api.elg
正解：A
解説：
質問 # 62
Which language can be used by users of Cloud Security Posture Management to create custom Security Policies?
- A. Governance Specific Language (GSL)
- B. JavaScript Object Notation (JSON)
- C. eXtensible Markup Language (XML)
- D. Posture Management Language (PML)
正解：A
質問 # 63
The ability to support development and run workloads effectively is commonly called:
- A. Performance Efficiency
- B. Reliability
- C. Cost Optimization
- D. Operational Excellence
正解：D
解説：
The Operational Excellence pillar includes the ability to support development and run workloads effectively, gain insight into their operations, and to continuously improve supporting processes and procedures to deliver business value.
質問 # 64
Which Security Gateway function inspects cloud applications and workload resources for malicious activity?
- A. Access Control
- B. Threat Prevention
- C. Application Control
- D. Identity Awareness
正解：B
質問 # 65
When using system routes and user defined routes in Azure, which takes precedent?
- A. The most specific route takes precedent
- B. The system route always takes precedent
- C. The user defined route takes precedent
- D. The newest route takes precedent
正解：A
質問 # 66
What are the Automation tools?
- A. CloudFormation
- B. API, CLI, Scripts, Shells and Templates
- C. Terraform and Ansible
- D. AMls
正解：B
質問 # 67
Which Pillar includes the following principals
*Experiment more often
*Go Global in minutes-
*Use serverless architectures
- A. Performance Efficiency
- B. Reliability
- C. Cost Optimization
- D. Operational Excellence
正解：A
質問 # 68
What is Reliability according to the Five Pillars?
- A. The ability of a Workload to function correctly and consistently in all expected.
- B. The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand changes and technologies evolve
- C. The ability to support development and run workload effectively
- D. In terms of the cloud, security is about architecting every workload to prevent.
正解：A
解説：
The Reliability pillar encompasses the ability of a workload to perform its intended function correctly and consistently when it's expected to. This includes the ability to operate and test the workload through its total lifecycle. You can find prescriptive guidance on implementation in the eliability Pillar whitepaper.
質問 # 69
Can you configure Micro segmentation (control traffic inside a subnet) on Azure?
- A. Yes, via System Routes
- B. No. Micro segmentation is not supported on Azure
- C. Yes. via UDR
- D. Yes, via routes on vNet
正解：A
質問 # 70
A utility that allows integration between SMS, the CloudGuard Network Solution, and CSPs, allowing the SMS to monitor and control scaling solutions in their associated cloud environments is called
- A. CloudGuard Controller and Enforcer (CCE)
- B. CloudGuard Controller (CC)
- C. CloudGuard Scanner and Enforcer (CSE)
- D. CloudGuard Management Extension (CME)
正解：D
質問 # 71
To troubleshoot CloudGuard Controller, administrators can execute the following command:
- A. cloudguard off
- B. cloudguard security
- C. cloudguard troubleshoot
- D. cloudguard on
正解：D
質問 # 72
Which software blades (Check Point features) are not are not supported in AWS?
- A. IPS
- B. VPN blade
- C. Mobile Access (SSLVPN)
- D. All Check Point blades are supported
正解：B
質問 # 73
Cloud Security Posture Management operational modes for cloud accounts are:
- A. Read/Write, Partial Protection, Full Protection
- B. Read Only, Read/Write. Full Protection
- C. Read Only, Full Protection. Region Lock
- D. Read Only, Read/Write. Region Lock
正解：C
解説：
質問 # 74
One of the five pillars of the framework for cloud security is 'Performance Efficiency'. The design principles of Performance Efficiency include:
- A. Apply security at all layers -
- B. Adopt a consumption model -
- C. Automatically recover from failure
- D. Go Global in minutes -
正解：D
解説：
erformance Efficiency
* The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demand chandes and technologies evolve
* Design Priniciples:
> Democratize advanced technologies
> Go Global in minutes
> Use serverless architectures
> Experiment ore often
> Consider mechanical sympathy
質問 # 75
......
156-561問題集と試験テストエンジン：https://www.goshiken.com/CheckPoint/156-561-mondaishu.html
CheckPoint 156-561問題集にはリアル試験問題解答：https://drive.google.com/open?id=1TLWIPGKaJLM9NNVjcl4nJG9_Hxm8iEgX