CloudSec-Pro Practice Test 15 — 15 Questions

Question 1

When managing access governance, which TWO methods can be used to restrict console access in Prisma Cloud?

Accepted Answer

Configuring IP address access restrictions. Access can be restricted via IP allowlists and SSO-based identity providers.

Answer

Disabling all web browsers

Answer

Creating a local user for every employee

Answer

Installing a local firewall

Question 2

Which THREE items should be included in an audit-ready compliance report?

Accepted Answer

Control status (Pass/Fail). A good report includes the scope, the specific controls audited, and the evidence/status of each.

Answer

Administrator password list

Answer

Employee salary data

Question 3

Which THREE of the following are examples of cloud-native security concepts?

Accepted Answer

Immutable infrastructure. Cloud-native security relies on immutable infrastructure, automated policy enforcement, and identity-centric perimeters.

Answer

Traditional perimeter-based network security

Answer

Manual patch management cycles

Question 4

Which THREE platforms are supported for Prisma Cloud Compute runtime protection?

Accepted Answer

Standalone Linux hosts. Kubernetes, standalone hosts, and serverless are the main compute platforms.

Answer

Mainframe legacy OS

Answer

Smartwatch OS

Question 5

You are using Prisma Cloud to protect a Fargate deployment. Which deployment strategy must you use to ensure full visibility into the container runtime?

Accepted Answer

Use the Prisma Cloud Task-Injection method during task definition.. Fargate requires Task-level execution injection.

Answer

Configure an API-based scan only.

Answer

Deploy a standard DaemonSet.

Answer

Install the defender on the underlying EC2 host.

Question 6

You notice that an unauthorized user is accessing data in a Google Cloud Storage bucket. To contain the incident, which action is most effective within the Prisma Cloud platform?

Accepted Answer

Apply a Deny policy to the user's IAM role. Leveraging Prisma Cloud's integration with IAM, you can trigger an alert that initiates a playbook to restrict or revoke the compromised user's permissions.

Answer

Delete the storage bucket

Answer

Change the bucket encryption keys

Answer

Update the firewall rules of the VPC

Question 7

Which THREE features are part of the Prisma Cloud 'Access Governance' capabilities?

Accepted Answer

Tracking of IAM user activity across cloud platforms. Access Governance includes role mapping, user activity tracking, and permission analysis.

Answer

Automatic port scanning of external IPs

Answer

Automated patching of serverless functions

Question 8

Which THREE criteria are commonly used to filter the Alerts view to reduce alert fatigue?

Accepted Answer

Severity level. Filtering by time, severity, and resource type are standard ways to manage alert volume.

Answer

User password length

Answer

Browser type

Question 9

Which TWO configuration areas in the Prisma Cloud Console are used to manage vulnerability policies?

Accepted Answer

Defend > Vulnerabilities > Images. Policies for registry and CI/CD are managed separately.

Answer

Manage > System > User

Answer

Monitor > Runtime > Status

Answer

Configure > Cloud > Storage

Question 10

When conducting threat hunting in Prisma Cloud Compute for a potential backdoor, which specific 'Compute' feature helps identify unexpected process execution?

Accepted Answer

Runtime Security Process Monitoring. The 'Runtime Security' > 'Process' policy monitors and alerts on unauthorized or unexpected processes running in containers.

Answer

Admission Control

Answer

Compliance Scanning

Answer

Vulnerability Scanning

Question 11

What does the 'IAM' dashboard in Prisma Cloud typically show?

Accepted Answer

A high-level overview of IAM users, roles, and potential risks. The IAM dashboard provides visibility into users, roles, and permission usage across all connected accounts.

Answer

Real-time network traffic analysis

Answer

A list of all open ports on firewalls

Answer

A list of all running virtual machines

Question 12

When configuring Data Security in Prisma Cloud to detect credit card numbers in Azure Blob Storage, which feature is used to define the detection logic?

Accepted Answer

Data Patterns. Prisma Cloud uses Data Profiles and Data Patterns to identify specific types of sensitive information such as PII or PCI-DSS data.

Answer

Cloud Discovery

Answer

Network Security Groups

Answer

IAM Policies

Question 13

When assessing the impact of a compromised IAM user, which THREE Prisma Cloud metrics are most valuable?

Accepted Answer

The permissions attached to the user's roles. Valuable metrics include scope of access, recent activity, and multi-cloud footprint.

Answer

The number of emails sent by the user

Answer

The user's favorite programming language

Question 14

An incident response team discovers an anomalous API call pattern originating from an EC2 instance. They are using Prisma Cloud Compute. Which action should be taken to perform a forensic analysis of the containerized process?

Accepted Answer

Use the 'Compute' > 'Defend' > 'Runtime' > 'Process' policy to trigger a forensic capture on detection. Prisma Cloud Compute provides 'Runtime Security' features, including the ability to trigger a forensic snapshot or capture process logs when an alert is triggered.

Answer

Update the AWS Security Group to block all inbound traffic

Answer

Restart the container to clear memory

Answer

Delete the EC2 instance immediately to stop the breach

Question 15

What is the impact of assigning a 'Limited' role in Prisma Cloud compared to an 'Admin' role?

Accepted Answer

The Limited role restricts access to specific cloud accounts or features. The Limited role restricts the user from modifying global settings or system configurations.

Answer

The Limited role only grants access to logs

Answer

The Limited role removes all permissions

Answer

The Limited role is restricted to read-only access for all features