2.4 Configure Cloud Security Scan Exclusion Settings CCCS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A cloud security analyst created a scan exclusion for a legacy database instance that was scheduled for decommissioning. The decommissioning has been postponed, and the database is now running a critical production workload. The analyst needs to ensure the database is actively scanned again while keeping the exclusion record for potential future use. What is the most appropriate action?

   • AModify the exclusion's reason to 'temporary'.
   • BDelete the exclusion record entirely.
   • CEdit the exclusion to apply to a different resource.
   • DDisable the exclusion record.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A cloud security engineer is configuring scan exclusions for a new AWS account. The account has a mix of EC2 instances, S3 buckets, and RDS databases. The engineer wants to exclude all resources tagged 'Test' from scanning. What is the correct way to configure this in the CrowdStrike console?

   • ACreate an exclusion by resource ID for each resource tagged 'Test'.
   • BCreate separate exclusions for each resource type with the tag 'Test'.
   • CCreate an exclusion by region and then by tag.
   • DCreate a single exclusion by tag with the key-value pair 'Test'.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a best practice when creating scan exclusions in CrowdStrike?

   • AUse broad exclusions like 'all resources' to save time
   • BExclude as many resources as possible to reduce noise
   • COnly exclude resources that are known to be secure
   • DLimit exclusions to specific, justified resources and review them regularly
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security analyst is managing scan exclusions for a cloud environment. An exclusion was created for a critical production database to address a performance issue. After a recent update, the performance issue is resolved, and the analyst wants to resume scanning the database. However, the analyst is concerned that the database might still have performance issues under load. What is the most appropriate action?

   • ADelete the exclusion immediately to resume scanning.
   • BKeep the exclusion in place and manually scan the database.
   • CDisable the exclusion and monitor the database for performance issues.
   • DEdit the exclusion to apply only during off-peak hours.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A cloud administrator is reviewing existing scan exclusions and finds one that was created for a resource that has since been terminated. The administrator wants to clean up the exclusion list to reduce clutter and avoid confusion. What is the most appropriate action?

   • ALeave the exclusion in place since it no longer affects any resources.
   • BDisable the exclusion to keep it for reference.
   • CEdit the exclusion to apply to a different resource.
   • DDelete the exclusion to keep the list clean and accurate.
   Reveal Solution Discussion Select an answer first