CloudSec-Pro Practice Test 8 — 10 Questions

Question 1

When configuring Data Security in Prisma Cloud, which THREE factors determine the effectiveness of your data discovery scan?

Accepted Answer

Defining the correct scan scope. Scan scope, data patterns, and account permissions all directly impact the ability of the platform to find and report sensitive data.

Answer

Increasing the number of virtual CPUs

Answer

Using a separate cloud account for scanning

Question 2

Which TWO components must be considered when implementing an encryption strategy for cloud-native applications?

Accepted Answer

Encryption of data at rest. Encryption at rest and encryption in transit are the two fundamental pillars of cloud data protection.

Answer

Encryption of CPU registers

Answer

Encryption of internet routing tables

Answer

Encryption of the physical data center power supply

Question 3

What is the purpose of 'Access Groups' in Prisma Cloud?

Accepted Answer

To organize users and assign them specific roles across cloud accounts. Access Groups allow grouping users for centralized permission management.

Answer

To define network segments for users

Answer

To set password complexity requirements

Answer

To group cloud resources for easier inventory

Question 4

When auditing IAM, you notice a user with 'AdministratorAccess' in AWS who only uses S3. Which Prisma Cloud feature identifies this discrepancy?

Accepted Answer

IAM User Activity analysis. IAM Security correlates permissions with actual service usage.

Answer

Network monitoring

Answer

Policy compliance dashboard

Answer

Compute vulnerability scanning

Question 5

Which THREE items are critical to include in a cloud post-incident review report?

Accepted Answer

Evaluation of response effectiveness. Root cause, response effectiveness, and lessons learned are essential for improving security posture post-incident.

Answer

The names of the individuals responsible

Answer

The cost of the cloud provider's electricity usage

Question 6

Which of the following is a recommended best practice for IAM in cloud environments?

Accepted Answer

Apply the principle of least privilege. Least privilege is the fundamental principle of IAM governance.

Answer

Use a single shared root account

Answer

Avoid using IAM roles

Answer

Grant 'Owner' access to all developers

Question 7

Which of the following is the standard method to onboard an AWS account into Prisma Cloud for IAM monitoring?

Accepted Answer

Creating a cross-account IAM role with a trust policy. Onboarding involves creating a cross-account IAM role with specific permissions.

Answer

Opening port 443 to the Prisma Cloud IP range

Answer

Providing root account credentials

Answer

Installing a Defender on every EC2 instance

Question 8

If a user needs to see all alerts related to IAM, what is the most efficient way to view them?

Accepted Answer

Filter the Alert page by 'IAM' category. Saved views or filtering the alert list allows for efficient monitoring.

Answer

Navigate to each cloud account's individual page

Answer

Export all alerts to a CSV and filter in Excel

Answer

Use the search bar to find user names

Question 9

To monitor for unusual login attempts, which policy type should be enabled?

Accepted Answer

IAM Anomaly Detection. IAM policies and anomaly detection policies are designed to spot unusual login patterns.

Answer

Vulnerability Policy

Answer

File Integrity Monitoring

Answer

Network Security Policy

Question 10

Which of these are valid reasons to use an Alert Rule in Prisma Cloud? (Choose THREE)

Accepted Answer

Defining notification frequency. Alert rules are used for routing, severity filtering, and defining notification policies for specific teams.

Answer

Managing corporate taxes

Answer

Assigning IP addresses to VMs