Online Access Free 156-561 Exam Questions

When Cloud Security Posture Management discovers non-compliant cloud resources, CloudBot applications perform automated remediations to correct any violations. How true is this statement?

• A.This is not true because CloudBot applications are used to provide chat service to respond to non-compliance alerts
• B.This is partially true, however the automated remediation is not done by CloudBot applications but it is done by the Security Management Server
• C.This is true, however it requires Full Protection access to the Cloud Account to perform automated remediation
• D.This is not true, Cloud Security Posture Management (CSPM) can only report non-compliance and cannot remediate by itself

CloudGuard uses several management tools to create and manage Security Policies. Which is NOT one of those tools?

• A.CLI
• B.CloudGuard Controller
• C.Gaia Portal
• D.SmartConsole

Which one of the following is part of the Orchestration Playbook process for creating a new spoke and an automated Security Gateway?

• A.An event trigger
• B.Communication with the OS
• C.Vertical scaling
• D.Transfer of resources to a VPN

What are the languages supported for Cloud Templates?

• A.Python and PERL
• B.JSON and Python
• C.JSON and YAML
• D.YAML and Python

An organization is using an adaptive security policy where a Data Center Object was imported and used in some rules. When the cloud resource represented by this object changes it's IP address, how will the change be effected on the Security Gateway

• A.If CloudGuard Controller is enabled on the Security Gateway, the gateway will connect with the Cloud account and synchronize all the Data Center Objects used on
• B.The change is automatically updated to the Security Management Server and so only a policy install from SmartConsole or with API will be required
• C.The Data Center Object needs to be refreshed in the SmartCansoIe and then a policy install will be required
• D.With a property functioning configuration, the change will automatically be done on the Security Gateway without any action required by the administrator