CloudSec-Pro Practice Test 2 — 30 Questions

Question 1

You are deploying Prisma Cloud Compute to protect a Kubernetes cluster. You need to ensure that process monitoring is active for all new containers. Where should you configure this in the Prisma Cloud Console?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Defend > Runtime > Container Policy. Compute runtime policies are the primary mechanism for monitoring container processes.

Answer

Configure > Runtime > Admission Control

Answer

Manage > Defenders > Deploy

Answer

Monitor > Runtime > Process Activity

Question 2

What is the effect of enabling 'Block' mode in a Runtime Policy without first performing a learning phase?

Accepted Answer

It will block all application traffic.. Prisma Cloud needs to learn the baseline behavior to avoid blocking legitimate traffic.

Answer

It will automatically whitelist all current connections.

Answer

It will automatically switch to alert mode.

Answer

It will have no effect.

Question 3

Which TWO factors contribute to the 'Risk Score' of a container in Prisma Cloud?

Accepted Answer

Vulnerability findings. Vulnerabilities and compliance status are the primary drivers of risk scoring.

Answer

Container start time

Answer

User operating system preference

Answer

Network latency

Question 4

When investigating an IAM-based attack, what is the best way to utilize Prisma Cloud to determine if an identity has excessive permissions?

Accepted Answer

Review the Cloud Security Posture Management (CSPM) IAM policies. Prisma Cloud's 'IAM Security' module analyzes effective permissions and flags identities that have 'Overprivileged' status based on actual usage.

Answer

Use vulnerability scanning on the IAM service

Answer

Run a network map visualization

Answer

Check the Cloud Workload Protection logs

Question 5

A customer is seeing 'App Firewall' alerts in Prisma Cloud for their serverless functions. Which configuration step is required to enable WAAS for AWS Lambda?

Accepted Answer

Update the Lambda function code to include the Prisma Cloud WAAS wrapper library.. WAAS for serverless requires specific library injection during the deployment phase.

Answer

Enable the 'Protect' flag in the Lambda function configuration within the Prisma Cloud Console.

Answer

Configure a Security Group rule to allow traffic from the Prisma Cloud scanner.

Answer

Deploy the Prisma Cloud Defender as a Sidecar container.

Question 6

You notice that your Prisma Cloud Console is not receiving updates for new CVEs. What should you check first?

Accepted Answer

The Intelligence Stream connectivity settings.. Connectivity to the Prisma Cloud Intelligence Stream is critical.

Answer

The local database storage limit.

Answer

The Defender status.

Answer

The API key expiration.

Question 7

You have a requirement to audit every command executed by users inside a container shell. Which policy should you configure?

Accepted Answer

Runtime: Process Auditing.. Process auditing is the standard way to track shell activity.

Answer

Vulnerability: Image Auditing.

Answer

Network: Session Auditing.

Answer

Compliance: Host Auditing.

Question 8

When a 'Vulnerability' policy is set to 'Block' in the build phase, what action does the Prisma Cloud CI plugin take?

Accepted Answer

It fails the build execution.. If a policy is set to block, it fails the build to prevent non-compliant code from moving forward.

Answer

It alerts the developer but lets the build complete.

Answer

It sends an email to the security team.

Answer

It automatically deletes the image.

Question 9

Which TWO actions can be taken automatically by Prisma Cloud when a high-severity vulnerability is detected in an image?

Accepted Answer

Alert the security team. Alerting and blocking are the two main automated responses.

Answer

Rebuild the image automatically

Answer

Contact the vendor for a patch

Answer

Delete the original source code

Question 10

Which THREE features are provided by the Prisma Cloud Compute WAAS module?

Accepted Answer

API protection. WAAS provides API protection, DoS protection, and App Firewalling.

Answer

Cloud Infrastructure Provisioning

Answer

Identity Federation

Question 11

What is the primary function of encryption in a cloud environment?

Accepted Answer

To protect data confidentiality. Encryption converts readable data into ciphertext, ensuring that only authorized parties with the decryption key can read it, protecting confidentiality.

Answer

To bypass authentication requirements

Answer

To provide high availability

Answer

To increase the speed of data transfer

Question 12

Which Prisma Cloud feature allows you to map cloud identities to real-world entities for compliance auditing?

Accepted Answer

Identity Correlation in the IAM module. Identity tagging or mapping in Prisma Cloud allows correlation between cloud IAM and organizational identities.

Answer

Alert Rule Configuration

Answer

Compute Identity Mapping

Answer

Compliance Reporting

Question 13

Which Prisma Cloud component is responsible for gathering runtime data and enforcing policies on a Kubernetes node?

Accepted Answer

Compute Defender. The Defender is the agent-based component that runs on the node.

Answer

Console API

Answer

Cloud Discovery Service

Answer

Prisma Cloud Radar

Question 14

You are observing high memory usage by the Prisma Cloud Defender on your nodes. What is the best troubleshooting step?

Accepted Answer

Check the Defender resource limits and adjust the configuration.. Log levels and resource limits are the primary concerns for agent performance.

Answer

Disable vulnerability scanning.

Answer

Delete the Defender and reinstall it.

Answer

Increase the log level to 'Debug'.

Question 15

Which THREE items are captured by the Prisma Cloud Compute Defender for container security?

Accepted Answer

Process execution events. Process, network, and file system activity are the core runtime monitoring pillars.

Answer

User browser history

Answer

Cloud Billing data

Question 16

When configuring a WAAS policy for a web application, what is the 'App Firewall' feature designed to detect?

Accepted Answer

SQL injection and Cross-Site Scripting (XSS).. App Firewall in WAAS protects against common application layer attacks.

Answer

Outdated Docker images.

Answer

Privilege escalation by a kernel exploit.

Answer

Unauthorized SSH access.

Question 17

Where can you view the 'Vulnerability Explorer' in the Prisma Cloud Console?

Accepted Answer

Monitor > Vulnerabilities > Vulnerability Explorer. The Vulnerability Explorer is found under the Monitor section.

Answer

Investigate > Vulnerability Explorer

Answer

Manage > Vulnerability Explorer

Answer

Defend > Vulnerabilities > Explorer

Question 18

Which file format can be used to export a compliance report from Prisma Cloud?

Accepted Answer

CSV and PDF.. Prisma Cloud supports CSV and PDF for reporting.

Answer

PPTX and PNG.

Answer

JSON and YAML.

Answer

XML and TXT.

Question 19

What is the primary function of the 'Admission Control' policy in Prisma Cloud Compute?

Accepted Answer

To prevent the deployment of images that violate security policies.. Admission control acts as a gatekeeper for K8s resources.

Answer

To scan running containers for malware.

Answer

To generate compliance reports for auditors.

Answer

To monitor network traffic between microservices.

Question 20

Which Prisma Cloud feature allows you to block suspicious file execution within a container based on behavior?

Accepted Answer

Runtime rule: File Integrity Monitoring (FIM).. Runtime protection specifically targets process and file behavior.

Answer

Network policy.

Answer

Compliance scanning.

Answer

Vulnerability scanning.