156-560 practice questions, page 5 of 9, with answer review and explanations.
Question 21
Security Management Servers deployed in a cloud environment can manage which of the following gateways?
Physical Security Gateways and CloudGuard IaaS Security Gateways
Only CloudGuard IaaS Security Gateways
On-Prem Security Gateways and CloudGuard IaaS Security Gateways on multiple CSP’s
Only Security Gateways with the CloudGuard Controller installed
Question 22
Which function do Load Balancers perform?
Trigger capacity on security gateways
To secure balance between private and public clouds
Direct Internet traffic to spoke networks
Restrict traffic loads between servers
Question 23
Adding new Security Gateways as system load increases is an example of:
Vertical Scaling
Network Scaling
Horizontal Scaling
System Scaling
Question 24
Automated Security Policy enforcement requires coordinated effort between the Security Management Server, the Security Gateway and:
CloudGuard Controller
The Cloud Service Provider
The Application Server
The SmartEvent Server
Question 25
The best practice for CloudGuard Network deployments utilizes the Hub and Spoke model. Which of these statements is the most correct for this model?
All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will all be deployed in one Hub
A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub
All traffic that enters and exits each spoke must travel through a hub
The Hub and Spoke model is applicable ONLY to multi-cloud environments. The Hub includes all the Security Gateways in all cloud environments. Each Spoke includes all resources of a Data-Center in a single Cloud Environment