6.4 Compare Cloud, Docker and Kubernetes Configurations to the Latest Industry Benchmarks to Determine Compliance CCCS Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company runs a mix of cloud VMs and Docker containers. The security team must produce a single compliance report against the latest CIS benchmarks. The team has limited time and must prioritize the most critical findings. What is the most effective approach?

   • ARun separate automated benchmark scans for cloud and Docker, then manually merge the results into a single report.
   • BUse a single generic security scanner for both environments to save time.
   • CFocus only on the Docker containers because they are more likely to have vulnerabilities.
   • DReview the cloud VMs manually and use automated tools only for Docker.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company uses AWS, Docker, and Kubernetes. They need to produce a compliance report against the latest CIS benchmarks for all three. The team has automated tools for each environment. What is the most efficient way to produce the report?

   • AUse a single tool that claims to cover all three environments.
   • BRun each automated tool separately and manually combine the results into one report.
   • CAssess only the Kubernetes environment because it covers the others.
   • DManually assess all three environments to ensure consistency.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which industry benchmark provides specific security configuration guidelines for Docker containers?

   • APCI DSS
   • BHIPAA
   • CCIS Docker Benchmark
   • DFedRAMP
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A security analyst is reviewing a cloud service configuration against an industry benchmark. Which benchmark is specifically designed to provide consensus-based security configuration guidelines for cloud providers?

   • ANIST SP 800-53
   • BOWASP Top 10
   • CISO 27001
   • DCIS Benchmarks
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company must assess compliance with the latest CIS benchmarks for their cloud, Docker, and Kubernetes environments. They have automated tools for each, but the results are in different formats. What is the best way to present the findings to management?

   • AProvide a detailed technical report for each environment without a summary.
   • BCreate a unified report that summarizes compliance status for each environment.
   • CPresent the raw output from each tool separately.
   • DFocus only on the environment with the most findings.
   Reveal Solution Discussion Select an answer first