CloudSec-Pro Practice Test 12 — 15 Questions

Question 1

Why might a policy not trigger an alert even if a resource is non-compliant?

Accepted Answer

The policy is disabled or the alert rule scope is incorrect. If the policy is 'Disabled' or the alert rule is not configured to include that policy, no alert will fire.

Answer

The user is not logged in

Answer

The cloud provider blocked the API

Answer

The browser cache is full

Question 2

What information is visible in the Prisma Cloud Alert details? (Choose THREE)

Accepted Answer

Affected Resource. Alert details provide the policy name, the affected resource, and the remediation steps.

Answer

Cloud provider's profit margin

Answer

User's home address

Question 3

Which compliance standard report is available out-of-the-box in Prisma Cloud to assess CIS benchmarks?

Accepted Answer

CIS Benchmark. Prisma Cloud includes pre-configured compliance templates for CIS, PCI, and HIPAA.

Answer

SOC2

Answer

ISO 27001

Answer

NIST 800-53

Question 4

How are Prisma Cloud policies categorized to help with compliance reporting?

Accepted Answer

By Compliance Standard and Severity. Policies are categorized by framework (e.g., PCI, HIPAA) and severity to assist in reporting.

Answer

By User Account

Answer

By Cloud Service Provider

Answer

By Resource Name

Question 5

What is the function of the 'Prisma Cloud Defender' in a CSPM-only deployment?

Accepted Answer

It is generally not used; CSPM relies on API integration. In a CSPM-only deployment, the Defender is not typically used; the SaaS platform performs the scanning via API.

Answer

To block malicious IPs

Answer

To monitor network traffic

Answer

To perform vulnerability scanning

Question 6

Which of the following are valid actions when configuring an alert rule? (Choose TWO)

Accepted Answer

Trigger Webhook. Alert rules can be configured to send emails and trigger webhooks for third-party integrations.

Answer

Delete Account

Answer

Reboot VM

Answer

Format Disk

Question 7

Which of the following are supported methods for exporting data from Prisma Cloud? (Choose TWO)

Accepted Answer

API Integration. Data can be exported via CSV reports or through API-based integration/webhooks.

Answer

Voice Message

Answer

Fax

Answer

Physical Mail

Question 8

What criteria can be used to filter policies in the Prisma Cloud UI? (Choose THREE)

Accepted Answer

Cloud Provider. Policies can be filtered by severity, compliance framework, and cloud provider.

Answer

Employee Name

Answer

File size of the policy

Question 9

When creating an RQL query, which elements are essential? (Choose THREE)

Accepted Answer

Source/Object (e.g., from cloud.resource). A valid RQL query typically requires a source, a scope (where), and filter conditions (where/and).

Answer

User biography

Answer

System uptime

Question 10

When auditing cloud events, which data source does Prisma Cloud rely on?

Accepted Answer

Cloud provider native audit logs. Prisma Cloud pulls data from native logging services like AWS CloudTrail, Azure Activity Logs, and GCP Audit Logs.

Answer

OS-level syslog

Answer

Web server access logs

Answer

Local database logs

Question 11

You have a policy that is currently generating too many alerts. How do you refine it without deleting it?

Accepted Answer

Update the policy RQL filter or alert rule scope. You can add filters to the policy's RQL or apply an Alert Rule to scope it to specific environments.

Answer

Change the policy name

Answer

Delete all cloud accounts

Answer

Disable all policies

Question 12

Which services are monitored by Prisma Cloud CSPM? (Choose TWO)

Accepted Answer

IAM User Permissions. Prisma Cloud monitors a vast array of cloud services, including storage and identity management.

Answer

Coffee Machine

Answer

Local Office Printer

Answer

Employee Payroll

Question 13

You are auditing an Azure environment. You need to ensure that the security of your guest operating systems is maintained. Under the shared responsibility model, what is the customer's primary responsibility for IaaS Virtual Machines?

Accepted Answer

Applying security patches to the guest operating system. For IaaS in Azure, the customer is responsible for guest OS updates, application security, and configuration, while Azure manages the host hardware and virtualization layer.

Answer

Managing the physical security of the data center

Answer

Patching the host server virtualization layer

Answer

Managing the hypervisor configuration

Question 14

When configuring 'VPC Service Controls' in GCP, what is the main security benefit?

Accepted Answer

To prevent data exfiltration by defining service perimeters. VPC Service Controls help mitigate data exfiltration risks by creating a security perimeter around sensitive services, even if identity credentials are stolen.

Answer

To automate disk backups

Answer

To manage virtual machine CPU allocation

Answer

To provide high-speed network routing

Question 15

In Prisma Cloud, what is the significance of the 'Compute' role in the context of IAM?

Accepted Answer

It provides permissions to manage Defender and host security. The Compute role is specifically designed to manage Defenders and container clusters.

Answer

It allows full access to all cloud IAM policies

Answer

It is required for cloud account onboarding

Answer

It allows the user to act as a global admin