Vulnerability Management CV0-004 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company uses a multi-cloud environment with AWS and Azure. A security analyst discovers that a developer accidentally left a storage bucket publicly readable. The analyst wants to implement a solution that continuously detects and alerts on such misconfigurations across both clouds. What should the analyst configure?

   • AA web application firewall (WAF) rule to block public access to the bucket
   • BA vulnerability scanner that performs periodic network-based scans of the storage endpoints
   • CA cloud security posture management (CSPM) tool that monitors both cloud environments
   • DA manual review process scheduled for each cloud account every quarter
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is developing an incident response plan for its cloud environment. Which component is essential to include?

   • AA list of all employees' personal contact information
   • BA backup of all cloud resources
   • CA detailed diagram of the company's organizational structure
   • DA predefined set of roles and responsibilities for the incident response team
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a key component of an incident response plan for cloud environments?

   • ADeleting all affected resources immediately to contain the incident
   • BEnsuring that all cloud resources are publicly accessible for easy investigation
   • CDefining roles and responsibilities for the incident response team
   • DDisabling all logging to prevent evidence tampering
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a common patch management strategy for cloud-based virtual machines?

   • AUsing a golden image that is updated and redeployed to replace existing VMs
   • BApplying patches directly to production VMs without testing
   • CWaiting for the cloud provider to patch all VMs automatically
   • DDisabling automatic updates to avoid any changes
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Why is compliance with regulatory standards important in cloud vulnerability management?

   • AIt guarantees that no vulnerabilities will ever be exploited
   • BIt eliminates the need for vulnerability scanning
   • CIt helps ensure that security controls are in place to mitigate vulnerabilities
   • DIt transfers all security responsibility to the cloud provider
   Reveal Solution Discussion Select an answer first