Courseiva
Free · No account needed · No credit card

Certified Cloud Security Engineer (Cloud-Security-Engineer) Practice Test

202 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Cloud Security Posture Managementhard
Full explanation →

An organization wants to enforce an automated remediation workflow in Prisma Cloud for AWS Security Groups that allow unrestricted ingress on port 22 (SSH). How should the administrator configure this integration?

Configure an Alert Rule in Prisma Cloud with an Auto-Remediation integration using an AWS SSM Document or Lambda function to modify the Security Group.Correct
BSet up a CloudTrail log metric filter that triggers an IAM policy rollback.
CEnable Trusted Advisor auto-fix within Prisma Cloud Global Settings.
DConfigure an AWS SQS queue to poll Prisma Cloud alerts and apply an inline SCP to revoke the rule.

Prisma Cloud supports automated remediation via integration with AWS Systems Manager (SSM) Automation or AWS Lambda functions triggered by Prisma Cloud Webhooks/Alert Rules.

Q2Cloud Security Posture Managementeasy
Full explanation →

When onboarding a new Google Cloud Platform (GCP) organization into Prisma Cloud, what is the primary prerequisite required to grant Prisma Cloud visibility across all projects?

ADeploying a Compute Engine instance running the Prisma Cloud Defender in every GCP project.
BConfiguring VPC Flow Logs to stream directly to an AWS S3 bucket monitored by Prisma Cloud.
CInstalling the Google Cloud CLI on a local machine and running a Terraform initialization script.
Creating a Service Account at the GCP Organization level with the Security Center Viewer and Viewer roles, and generating a JSON key.Correct

Prisma Cloud requires a service account at the GCP organization level with the Security Center Viewer and Viewer roles to gain visibility across all projects. This service account, with a JSON key, allows Prisma Cloud to enumerate resources and assess security configurations acro…Read full explanation

Q3Cloud Security Posture Managementeasy
Full explanation →

An administrator needs to quickly view the overall security posture and compliance status of multiple AWS accounts connected to Prisma Cloud. Which Prisma Cloud tab provides this aggregate high-level executive dashboard?

AInventory
BInvestigate
CCompliance
DashboardCorrect

The Dashboard tab in Prisma Cloud provides the aggregate, executive-level view of security posture and compliance across all connected AWS accounts, showing trend lines, top risks, and compliance scores in a single pane. It is designed for exactly this use case — a quick, high-le…Read full explanation

What's covered

Questions are tagged by exam domain. Practice a specific domain or mix them all.

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All Cloud-Security-Engineer questionsCloud-Security-Engineer exam guideStudy guidePractice by domain