156-560 practice questions 31–40

1. Question 31 · 125 in bank

   How many gateways are supported in a High Availability solution?

   • A3
   • B1
   • C2
   • D4

   Show answer

   Answer: C

   Next question

2. Question 32 · 125 in bank

   Which scripting language is used by CloudGuard to develop templates that automate Security Gateway deployments?

   • APerl
   • BC++
   • CJSON
   • DPython

   Show answer

   Answer: C

   Next question

3. Question 33 · 125 in bank

   What do Workloads require to automate processes?

   • AAPI
   • BCLI
   • CCSP Portal
   • DShell

   Show answer

   Answer: A

   Next question

4. Question 34 · 125 in bank

   What are the Automation tools?

   • AAPI, CLI, Scripts, Shells and Templates
   • BTerraform and Ansible
   • CAMls
   • DCloudFormation

   Show answer

   Answer: A

   Next question

5. Question 35 · 125 in bank

   Clouds use orchestration platforms to accomplish various deployment tasks. Which of the following is NOT one of those tasks?

   • ADeploying environments with complex dependencies.
   • BDeploying multiple data centers.
   • CDeploying clustered applications.
   • DDeploying endpoint security devices.

   Show answer

   Answer: D

   Next question

6. Question 36 · 125 in bank

   REST is an acronym for the following:

   • ARepresentation of Security Traffic
   • BReally Efficient Security Template
   • CRepresentational State Transfer
   • DReal Security Threat

   Show answer

   Answer: C

   Next question

7. Question 37 · 125 in bank

   Logging Implied rules, enabling Hit Count, and defining advanced VPN functions are all settings that are applied as:

   • AInline Layer
   • BGlobal Properties
   • CPolicy Settings
   • DGateway Properties

   Show answer

   Answer: B

   Next question

8. Question 38 · 125 in bank

   What is a Security Zone?

   • AA Security Zone is the subnet of each of the firewall’s interfaces. All other Spoke networks are peered with the Security Zone network.
   • BA Cloud Service Provider (CSP) provides a network zone to deploy virtual security device. CloudGuard Security Gateways and Security Management Servers are deploying in this Security Zone so that they are protected from the rest of the world.
   • CA Security Zone is a group of one or more network interfaces from different centrally managed gateways bound together and used directly in the Rulebase. It allows administrators to define the Security Policy based on network interfaces rather than IP addresses.
   • DA Security Zone is the network in which the Security Management and SmartConsole are deployed. This can be in one of the Spoke networks on the Cloud or it can be in on-premise network

   Show answer

   Answer: C

   Next question

9. Question 39 · 125 in bank

   An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it’s IP address, how will the change be effected on the Security Gateway?

   • AIf CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on it.
   • BWith a properly functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator.
   • CThe Data Center Object needs to be refreshed in the SmartConsole and then a policy install will be required.
   • DThe change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required.

   Show answer

   Answer: B

   Next question

10. Question 40 · 125 in bank

    Which of these is an example of Control Connections as accepted with implicit rules enabled from Global Properties?

    • AAny TCP or UDP communication from the Primary SMS to any managed Security Gateway.
    • BCommunication with various types of servers, such as RADIUS, CVP, UFP, TACACS, LDAP and logical servers, even if these servers are not specifically defined resources in your Security Policy.
    • CCluster Control Protocol (CCP) communication between members of a Security Gateway Cluster.
    • DCommunication using any protocol that can be used to control a remote host machine e.g. SSH, Telnet, RDP, etc.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-560 practice, question 31. 125 questions available.