Exam 156-560 topic 1 question 16 discussion

From CCCS R81 Manual: Automating Security Policy The integration of cloud resources into the Security Policy requires establishing a secure connection between the cloud, CloudGuard Security Gateways, and the SMS. Every Security Gateway that conducts API calls with a cloud datacenter requires an IAM private-key registration in order to receive updates when the configuration of a Data Center object changes. Administrators must activate the CloudGuard Controller function in the Security Management Server to communicate with the cloud datacenter through API calls. The Security Management Server also requires secure internal communications (SICI with the Security Gateways to enforce Security Policy.

Correct answer is A

Correct A. A component of Check Point's Security Management Server, the CloudGuard Controller manages security in public and on-premises environments with one unified management solution. CloudGuard Controller establishes a trusted relationship with the cloud environment. The CloudGuard Controller pushes updates to attributes and objects in the Security Policy rules to Check Point Security Gateways.

Answer is C https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CloudGuard_Controller_AdminGuide/Topics-CGRDG/Integrating-with-Data-Center-Servers.htm?tocpath=Integrating%20with%20Data%20Center%20Servers%7C_____0#Integrating_with_Data_Center_Servers

A is correct