CloudSec-Pro Practice Test 6 — 10 Questions

Question 1

Which type of scanning should be enabled to detect vulnerabilities in the host OS of a Kubernetes node?

Accepted Answer

Host scanning.. Host scanning is required to analyze node-level OS packages.

Answer

Registry scanning.

Answer

Serverless scanning.

Answer

CI/CD plugin scanning.

Question 2

Which TWO of the following are valid methods for deploying the Prisma Cloud Compute Defender?

Accepted Answer

Manual binary installation on host. DaemonSets and Helm charts are standard methods for K8s deployments.

Answer

Public web portal

Answer

Email attachment

Answer

DNS records

Question 3

Which component of Prisma Cloud allows for the continuous monitoring of encryption settings across all cloud storage buckets?

Accepted Answer

Cloud Security Posture Management. The Cloud Security Posture Management (CSPM) component continuously scans resource configurations, including encryption status, against policies.

Answer

Identity-Based Micro-segmentation

Answer

Threat Detection

Answer

Cloud Workload Protection

Question 4

Which TWO of the following are essential components of a cloud incident response plan?

Accepted Answer

Preparation and Planning. Preparation and Detection/Analysis are fundamental stages of any standard incident response framework.

Answer

Increasing developer salaries

Answer

Disabling all cloud services

Answer

Purchasing new cloud hardware

Question 5

Which TWO types of scans can be performed by the Prisma Cloud Compute Registry scanner?

Accepted Answer

Vulnerability scanning. Vulnerability and compliance are the two primary registry scan types.

Answer

Hardware diagnostic scan

Answer

Customer email scanning

Answer

Database indexing scan

Question 6

When integrating Prisma Cloud with a SIEM for incident response, which data format is typically used to ensure compatibility?

Accepted Answer

JSON or CEF. Prisma Cloud supports forwarding alerts in JSON or CEF format to common SIEM platforms to facilitate incident management.

Answer

Plain ASCII text without structure

Answer

Proprietary encrypted proprietary format

Answer

Binary image file

Question 7

You are configuring Prisma Cloud to perform least-privilege analysis. Which feature should be enabled to identify unused IAM permissions in AWS accounts?

Accepted Answer

IAM Security > IAM User Activity. Prisma Cloud uses IAM Security to analyze actual usage against granted permissions.

Answer

Cloud Accounts > Onboarding > IAM Roles

Answer

Compliance > Policy Analysis

Answer

Compute > Vulnerability Management

Question 8

You are tasked with remediating a compliance violation where an RDS instance is publicly accessible. Using Prisma Cloud, which automated workflow is recommended?

Accepted Answer

Execute a Lambda function via Prisma Cloud Auto-Remediation. Prisma Cloud's Auto-Remediation feature can be linked to policies to automatically fix misconfigurations, such as removing public access to RDS.

Answer

Manually update the AWS RDS console setting

Answer

Create a new Alert Rule without an action

Answer

Change the IAM role of the Prisma Cloud service account

Question 9

Which THREE features are provided by the Prisma Cloud Compute runtime security module?

Accepted Answer

File Integrity Monitoring (FIM). Runtime security includes process monitoring, network monitoring, and file integrity monitoring for containers and hosts.

Answer

Hardware temperature monitoring

Answer

Physical building access control

Question 10

A security administrator needs to ensure that Prisma Cloud only uses specific Identity Providers for SSO. Where should they configure this integration?

Accepted Answer

Settings > Access Control > Identity Provider. Prisma Cloud SSO integration is managed within the Identity Provider settings under Settings > Access Control.

Answer

Cloud Accounts > IAM Integration

Answer

Policy > Access Governance > SSO

Answer

Compute > Defenders > SSO Settings