Certified Cloud Security Professional (CloudSec-Pro) CloudSec-Pro practice test

What is the primary function of a Cloud Security Posture Management (CSPM) tool?

What is the primary goal of the 'Principle of Least Privilege' in a cloud environment?

Which of the following is a benefit of using 'Identity and Access Management' (IAM) groups?

In a Google Cloud environment using Cloud SQL, which task remains the customer's responsibility?

When using 'Infrastructure as Code' (IaC), what is a key security risk if templates are shared publicly?

Which THREE of the following are critical components of a comprehensive Cloud Security strategy? (Choose three)

You are deploying a workload on Azure and need to ensure that the underlying hardware maintenance is handled by Microsoft. Which aspect of the Shared Responsibility Model does this…

When using Azure Key Vault to store secrets, which entity holds the responsibility for the protection of the underlying hardware security module (HSM)?

Which of the following is a critical step when performing a 'Cloud-Native' threat model?

Which TWO of the following are common risks associated with misconfigured cloud storage buckets? (Choose two)

Which THREE of the following tasks are exclusively the responsibility of the cloud provider in a SaaS model?

When configuring a Runtime Policy for serverless, which of the following is a capability that you can enforce?

Which of the following is a core characteristic of cloud-native security?

You are configuring a security group in AWS. What is the default behavior for inbound traffic?

Which TWO of the following are primary security benefits of using cloud-native security tools? (Choose two)

Which THREE of the following are pillars of a Zero Trust approach? (Choose three)

Which THREE components are involved in the Prisma Cloud serverless security workflow?

Which of the following is a primary goal of using Data Loss Prevention (DLP) tools within a cloud-native security platform?

Which cloud security concept allows for the rapid restoration of services after a security incident?

Which THREE of the following are required to maintain a secure cloud-native environment? (Choose three)

A security administrator is evaluating the shared responsibility model for an AWS deployment. Which task remains the sole responsibility of the customer when using Amazon RDS?

You need to reduce false positives in your Prisma Cloud vulnerability scan results for your Jenkins CI pipeline. Which approach should you take?

What is the benefit of the 'Drift Detection' feature in Prisma Cloud Compute?

You want to restrict the network access of a container to only communicate with a specific database. How do you implement this in Prisma Cloud?