CloudSec-Pro Practice Test 11 — 15 Questions

Question 1

Which of the following cloud providers are natively supported by Prisma Cloud CSPM? (Choose TWO)

Accepted Answer

AWS. Prisma Cloud supports all major public cloud providers including AWS, Azure, and Google Cloud.

Answer

Gaming Consoles

Answer

Local On-Premise Rack

Answer

Home Router

Question 2

What is the primary difference between a 'Policy' and an 'Alert Rule' in Prisma Cloud?

Accepted Answer

Policy defines the check; Alert Rule defines the action. A policy defines what is a violation, while an alert rule defines what actions (notifications/remediation) occur when a violation is detected.

Answer

Policy is for cloud; Alert Rule is for containers

Answer

They are synonymous terms

Answer

Alert Rule defines the check; Policy defines the action

Question 3

You are seeing an influx of false-positive alerts for 'Excessive IAM Permission' in your production environment. How can you tune this without disabling the policy globally?

Accepted Answer

Apply alert rule exceptions using filters. You can create an alert rule exception or apply a filter based on specific entities or tags to suppress noise.

Answer

Remove the IAM user

Answer

Disable the policy in Policy Settings

Answer

Re-onboard the cloud account

Question 4

Where do you view all triggered violations in the Prisma Cloud console?

Accepted Answer

Alerts. The Alerts tab is the primary interface for managing and reviewing all triggered policy violations.

Answer

Dashboard

Answer

Settings

Answer

Investigate

Question 5

Which Prisma Cloud feature allows you to view the current state of your cloud environment compared to a baseline?

Accepted Answer

Asset Inventory. The 'Asset Inventory' and 'Investigate' features allow for state comparison and drift detection.

Answer

Vulnerability Scan

Answer

Compliance Dashboard

Answer

Log Streaming

Question 6

Which TWO of the following are primary methods for ingesting logs into the Prisma Cloud platform?

Accepted Answer

Direct log forwarding to Prisma Cloud collector. Prisma Cloud supports ingestion via API-based integrations and direct log forwarding/streaming.

Answer

Packet capture via physical span port

Answer

Manual file upload via browser

Answer

SQL database direct connect

Question 7

To prevent unauthorized access to the Prisma Cloud console, which authentication method should be enforced?

Accepted Answer

SAML-based SSO. SSO (Single Sign-On) integration is the recommended method for centralizing and securing console access.

Answer

Local API keys

Answer

Public IP white-listing

Answer

Basic Username/Password

Question 8

Which THREE actions should be taken if a critical compliance violation is detected?

Accepted Answer

Isolate the affected resource. Effective response involves investigation, remediation, and reporting/documentation.

Answer

Ignore the alert

Answer

Delete all audit logs

Question 9

A security administrator needs to ensure that all AWS S3 buckets are encrypted at rest. Where should they navigate in the Prisma Cloud console to create a policy to enforce this requirement?

Accepted Answer

Policies > Add Policy > Config. Prisma Cloud uses the Policies menu to manage and create custom compliance and configuration policies.

Answer

Compute > Defend > Policies

Answer

Settings > Cloud Accounts

Answer

Investigate > Policies

Question 10

A security requirement states that all cloud resources must be tagged with an 'Owner' attribute. How can you automate this compliance check?

Accepted Answer

Create an RQL policy for missing tags. Using a RQL policy, you can identify resources missing specific tags and trigger alerts.

Answer

Configure a Webhook

Answer

Use an IAM role

Answer

Update the Cloud Account metadata

Question 11

You want to automate the remediation of an S3 bucket that is public. Which Prisma Cloud feature supports this?

Accepted Answer

Remediation. The Remediation feature, often integrated with Lambda or other automation, allows for auto-remediation workflows.

Answer

Alert Logic

Answer

Cloud Account Access

Answer

Policy Enforcement

Question 12

Which of the following are valid components of a Prisma Cloud alert rule? (Choose TWO)

Accepted Answer

Notification Target. Alert rules require defining both the scope (what to monitor) and the notification target (where to send).

Answer

Cloud Provider password

Answer

User password reset

Answer

Hardware inventory

Question 13

Which THREE features assist in managing the 'Compliance' lifecycle?

Accepted Answer

Automated reporting. Continuous monitoring, reporting, and policy management form the lifecycle.

Answer

Disabling all alerts

Answer

Ignoring all logs

Question 14

You are troubleshooting a missing cloud resource in Prisma Cloud. What is the first step to verify if the account is correctly ingested?

Accepted Answer

Settings > Cloud Accounts. Verifying the cloud account status in the 'Cloud Accounts' section confirms connectivity and permission health.

Answer

Investigate > Cloud Resources

Answer

Alerts > Overview

Answer

Policies > Compliance

Question 15

What is the main goal of the 'Investigate' page in Prisma Cloud?

Accepted Answer

To run ad-hoc queries using RQL. The Investigate page provides a powerful interface to query cloud resources using RQL.

Answer

To view compliance benchmarks

Answer

To add new cloud accounts

Answer

To configure alert notifications