156-560

156-560 practice questions, page 8 of 9, with answer review and explanations.

Question 36

REST is an acronym for the following:

  1. Representation of Security Traffic
  2. Really Efficient Security Template
  3. Representational State Transfer
  4. Real Security Threat

Question 37

Logging Implied rules, enabling Hit Count, and defining advanced VPN functions are all settings that are applied as:

  1. Inline Layer
  2. Global Properties
  3. Policy Settings
  4. Gateway Properties

Question 38

What is a Security Zone?

  1. A Security Zone is the subnet of each of the firewall’s interfaces. All other Spoke networks are peered with the Security Zone network.
  2. A Cloud Service Provider (CSP) provides a network zone to deploy virtual security device. CloudGuard Security Gateways and Security Management Servers are deploying in this Security Zone so that they are protected from the rest of the world.
  3. A Security Zone is a group of one or more network interfaces from different centrally managed gateways bound together and used directly in the Rulebase. It allows administrators to define the Security Policy based on network interfaces rather than IP addresses.
  4. A Security Zone is the network in which the Security Management and SmartConsole are deployed. This can be in one of the Spoke networks on the Cloud or it can be in on-premise network

Question 39

An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it’s IP address, how will the change be effected on the Security Gateway?

  1. If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on it.
  2. With a properly functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator.
  3. The Data Center Object needs to be refreshed in the SmartConsole and then a policy install will be required.
  4. The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required.

Question 40

Which of these is an example of Control Connections as accepted with implicit rules enabled from Global Properties?

  1. Any TCP or UDP communication from the Primary SMS to any managed Security Gateway.
  2. Communication with various types of servers, such as RADIUS, CVP, UFP, TACACS, LDAP and logical servers, even if these servers are not specifically defined resources in your Security Policy.
  3. Cluster Control Protocol (CCP) communication between members of a Security Gateway Cluster.
  4. Communication using any protocol that can be used to control a remote host machine e.g. SSH, Telnet, RDP, etc.