CloudSec-Pro Practice Test 14 — 15 Questions

Question 1

Which TWO of the following are effective ways to secure access to your cloud management console? (Choose two)

Accepted Answer

Use strong, unique passwords. MFA and strong password policies are the standard methods for securing console access.

Answer

Share one root account password among all admins

Answer

Access the console only from public Wi-Fi

Answer

Disable all logging

Question 2

You have integrated Prisma Cloud with Azure AD. If a user is deleted from Azure AD, what happens to their Prisma Cloud console access?

Accepted Answer

The user loses access to the Prisma Cloud console. Synchronized SSO users lose access when their source identity is deleted.

Answer

The user account remains active in Prisma Cloud until manually deleted

Answer

The user is automatically converted to a local account

Answer

The user keeps access until the next password reset

Question 3

A Linux host is reporting an alert for an unauthorized process. You need to see the process tree. Which tab in the Console provides this data?

Accepted Answer

Events > Runtime Events. The 'Runtime' or 'Events' data for a specific host provides drill-down capabilities including process lineage.

Answer

Monitor > Assets

Answer

Defend > Vulnerabilities

Answer

Dashboard > Compliance

Question 4

When creating an alert rule, what is the purpose of the 'Alert Notifications' section?

Accepted Answer

To specify the communication channels for alert delivery. Alert Notifications define where the alert data is sent, such as email, Slack, or ServiceNow.

Answer

To scope the resources monitored

Answer

To define the policy severity

Answer

To schedule scanning

Question 5

In the context of AWS, which tool provides visibility into compliance and configuration drift?

Accepted Answer

AWS Config. AWS Config is the service designed to track resource configuration changes and evaluate them against compliance rules.

Answer

AWS CloudTrail

Answer

AWS Shield

Answer

Amazon Inspector

Question 6

After a data exfiltration attempt, you must review the logs within Prisma Cloud. Which log source is most relevant for identifying the specific identity that performed the suspicious API calls?

Accepted Answer

Audit Logs. The 'Audit Logs' in Prisma Cloud capture the activity performed by users and service accounts against the cloud environment configuration.

Answer

Vulnerability Logs

Answer

Flow Logs

Answer

Compliance Logs

Question 7

In GCP, what is the primary purpose of 'Organization Policy Service'?

Accepted Answer

To enforce centralized configuration guardrails. The Organization Policy Service allows administrators to set guardrails and restrictions on resources across the entire organization to ensure compliance.

Answer

To manage user credentials

Answer

To monitor network traffic

Answer

To patch virtual machine kernels

Question 8

A security team is implementing 'Shift Left' security. What is the fundamental shift in responsibility for the development team?

Accepted Answer

Taking ownership of security compliance during the design and build phase. Shift left moves security responsibility earlier in the lifecycle, requiring developers to ensure code and infrastructure definitions (IaC) are secure before deployment.

Answer

Disabling all security controls to prioritize development velocity

Answer

Transferring all risk to the cloud provider's management console

Answer

Waiting for the security team to perform manual penetration tests after deployment

Answer

Outsourcing security scanning to the cloud provider

Question 9

In Prisma Cloud, what does the 'Host Activity' feature under Runtime protection track?

Accepted Answer

User logins and process execution on the host.. Host activity monitors base OS level events.

Answer

Container image pull requests.

Answer

Kubernetes API requests.

Answer

Cloud service bucket permissions.

Question 10

When securing a containerized application, where should you place the primary focus for security?

Accepted Answer

The container image and runtime. Securing the container image, the registry, and the container runtime is critical for securing the workload itself.

Answer

The office network firewall

Answer

The physical server power supply

Answer

The datacenter cooling system

Question 11

You need to automate vulnerability scanning for images stored in an external registry. Which component should you deploy to perform the scan without manual intervention?

Accepted Answer

Compute Defender (Registry scanner mode).. Registry scanners are dedicated components for this task.

Answer

Console Webhook.

Answer

Prisma Cloud Agentless scanner.

Answer

The CI/CD plugin.

Question 12

In the context of 'Shared Responsibility', what does the customer typically manage in a SaaS (Software as a Service) offering?

Accepted Answer

User access and data. In SaaS, the provider manages almost everything except the user access and the data itself.

Answer

The application code

Answer

The physical network cables

Answer

The underlying operating system

Question 13

You are analyzing a Prisma Cloud deployment to enforce compliance. You discover that a developer has created a public S3 bucket containing sensitive data. Which principle of the cloud security model is being violated?

Accepted Answer

The customer's responsibility for resource configuration and data security. The customer is responsible for 'Security in the Cloud', which includes misconfiguration management and data exposure risks, even if the platform provides the security tools.

Answer

The shared responsibility for data center perimeter security

Answer

The provider's responsibility for identity and access management

Answer

The provider's responsibility for infrastructure availability

Question 14

You are troubleshooting why an IAM policy isn't triggering an alert. What is the first thing you should check?

Accepted Answer

Ensure the policy status is 'Enabled' and the scope is correct. Verify the policy is enabled and the scope includes the relevant resource.

Answer

Restart the Prisma Cloud instance

Answer

Delete and recreate the cloud account

Answer

Check if the Defender is running

Question 15

A company is migrating a legacy application to a containerized environment using Amazon EKS. Under the shared responsibility model, which action must the customer perform to secure the control plane?

Accepted Answer

Defining and enforcing Kubernetes RBAC and network policies. While AWS manages the EKS control plane (master nodes), the customer remains responsible for managing the Kubernetes RBAC, network policies, and the worker node security.

Answer

Applying security patches to the Kubernetes API server

Answer

Physical maintenance of the underlying master node servers

Answer

Updating the underlying host OS of the managed master nodes