Updated Jan 20, 2026 156-561 Exam Dumps - PDF Questions and Testing Engine [Q47-Q68]

4.5/5 - (2 votes)

Updated Jan 20, 2026 156-561 Exam Dumps – PDF Questions and Testing Engine

New (2026) CheckPoint 156-561 Exam Dumps

Q47. CloudGuard uses several management tools to create and manage Security Policies. Which is NOT one of those tools?

Gaia Portal

CloudGuard Controller

SmartConsole

CLI

Q48. Why is an IAM role created when installing a cluster on AWS?

In order to perform cluster related changes

It is created for the installation process only, it gets deleted

IAM role is created for auditing purposes

IAM role is not created

Q49. Introduction to Cloud Security Posture Management uses which of the following to connect, communicate, and collect information from cloud accounts and third party tools?

SmartConsole

HTML

CLI

APIs

Q50. What does the Adaptive Security Policy involve to import the Data Center Objects?

CloudGuard API

CloudGuard Controller

CloudGuard Access Control

CloudGuard Gateway

Q51. What platform provides continuous compliance and governance assessments that evaluate public infrastructure according to industry to industry standards and best practices?

Cloud Security Posture Management

CloudGuard laaS Public Cloud

CloudGuard SaaS

CloudGuard laaS Private Cloud

Q52. What is an alternative method to double NAT in Azure?

Scaling

System Routes

Peering

User Defined Routes

Q53. Cloud Security Posture Management uses which of the following to integrate with cloud accounts?

IAM account credentials

Security Objects

SDDC

CloudGuard Controller

Q54. Cloud Security Posture Management (CSPM) operates as which type of service based platform?

CaaS

SaaS

PaaS

laaS

Q55. Which cloud components specify the Workloads associated with traffic and tell load balancers which Workloads are members of the same group?

Target Groups

Listening Rules

Dynamic assignment

Health Checks

Q56. Which log file should an administrator gather to expedite the diagnosis of a CloudGuard Controller issue?

$FWDIR/logs/cloud_proxy.elg

$CPDIR/logs/cloud.elg

$FWDIR/logs/cloud_controller.elg

$DADIR/logs/controller_proxy.elg

Q57. When using Data Center Objects in a policy and the objects are not updating, what are two steps we can check?

1. Verify process is running with ‘cloudguard on’ and 2. restart the api process with ‘api restart’

1. Verify process is running with ‘cloudguard on’ and 2. ‘test communication’ button the Data Center Server object

1. Reboot the Security Management Server and 2. restart the cloudguard process with ‘cloudguard on’

1. Reboot the Security Management Server and 2. restart the api process with ‘api restart’

Q58. Where can I find solution templates for Azure?

On the market place

In a search on the Internet

At the relevant SK

In a special Azure page

Q59. How is CloudGuard for Azure licensed in PAYG (Pay As You Go) mode?

Per hour based on resources consumed

Per Gateway

Per Socket

Per vCore

Q60. Which software blades (Check Point features) are not are not supported in AWS?

IPS

VPN blade

All Check Point blades are supported

Mobile Access (SSLVPN)

Q61. Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?

Minimizes the risk of external threats by blocking access to high risk sites and external users

Minimizes the risk of external threats by blocking accessed to the internet

Minimizes the risk of external threats by blocking access to all internal resources

Minimizes the risks of external threats by blocking access to services and ports

Q62. The integration of cloud resources into the Security Policy requires establishing a secure connection between_________________

The SDDC, CloudGuard Security Gateways, and the Security Management Server

The SDDC and CloudGuard Security Gateways.

The SDDC and the Security Management Server

CloudGuard Security Gateways and the Security Management Server

Q63. What is public cloud?

Computing environment with limited resources

Computing environment located over the internet

A shared computing environment

Computing environment dedicated to one company

Q64. Which software blade provides forensic analysis tools?

Logging Blade

Identity Awareness Blade

Monitoring Blade

SmartEvent Blade

Q65. According to best practices what would be the best way to install a Check Point cluster on AWS?

Following the instruction from the relevant Check Point SK

With PowerShell

From AWS Console

From AWS Market Place

Q66. When Cloud Security Posture Management discovers non-compliant cloud resources, CloudBot applications perform automated remediations to correct any violations. How true is this statement?

This is true, however it requires Full Protection access to the Cloud Account to perform automated remediation

This is not true, Cloud Security Posture Management (CSPM) can only report non-compliance and cannot remediate by itself

This is partially true, however the automated remediation is not done by CloudBot applications but it is done by the Security Management Server

This is not true because CloudBot applications are used to provide chat service to respond to non-compliance alerts

Q67. Check Point’s Public Cloud model is described as the following

A Security Matrix Model

A Hub and Spoke Model

An Advanced Threat Tunnel Model

A Borderless Model

https://www.checkpoint.com/downloads/products/check-point-secure-cloud-blueprint-azure-whitepaper.pdf (p. 5)

Q68. Which hub serves as the front end of the Workload that permits inbound web communications such as HTTP traffic from the Internet to reach spoke Workloads?

Web Hub

Southbound Hub

East-West Hub

Northbound Hub

ttps://www.checkpoint.com/downloads/products/check-point-secure-cloud-blueprint-azure-whitepaper.pdf p.6

Loading …