Free 156-560 Exam Braindumps
Check Point Certified Cloud Specialist (CCCS) Questions 26–30 (page: 7)

Updated On: 10-Feb-2026

The best practice for CloudGuard Network deployments utilizes the Hub and Spokes Model.
Which of these statements is the most correct for this model.

  1. All the security components including SMS, Northbound and Southbound Security Gateways and East-West VPN Gateways will be deployed in one Hub.
  2. A Spoke can ONLY consist of a single virtual machine in a dedicated subnet shared between the VM and the Hub.
  3. All traffic that enters and exits each spoke must travel through a hub
  4. The Hub and Spoke model is applicable ONLY to multi-cloud environments. The Hub includes all the Security Gateways in all cloud environment. Each Spoke includes all resources of a Data Center in a single Cloud Environment.

Answer(s): A



Check Point's Public Cloud model is described as the following

  1. A Security Matrix Model
  2. A Hub and Spoke Model
  3. An Advanced Threat Tunnel Model
  4. A Borderless Model

Answer(s): B

Explanation:

https://www.checkpoint.com/downloads/products/check-point-secure-cloud-blueprint-azure- whitepaper.pdf (p. 5)



Which is not a deployment method for CloudGuard solutions using

  1. Terraform
  2. Shell
  3. CLI
  4. CPS Portal

Answer(s): A



What is an alternative method to double NAT in Azure?

  1. Scaling
  2. System Routes
  3. Peering
  4. User Defined Routes

Answer(s): C



To travel between spokes, non-transitive traffic uses ________ to allow Ipv4 and IPv6 traffic to reach

a spoke network

  1. a VTI
  2. the Northbound hub
  3. the Southbound hub
  4. Peering

Answer(s): D



Viewing page 7 of 18
Viewing questions 31 - 35 out of 205 questions


Post your Comments and Discuss Checkpoint 156-560 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!