2.4 Configure Cloud Security Scan Exclusion Settings CCCS Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What happens immediately after you remove a scan exclusion for a resource in CrowdStrike?

   • AThe resource is immediately quarantined
   • BThe resource's security posture is automatically improved
   • CThe resource is permanently deleted from the account
   • DThe resource becomes eligible for scanning on the next scan cycle
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When creating a new scan exclusion in the CrowdStrike console, what information is typically required?

   • AThe severity level of the alerts to suppress
   • BThe exclusion type and the scope (e.g., resource, region, or tag)
   • CThe email address of the account owner
   • DThe IP address of the resource to exclude
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security team is managing scan exclusions for a large cloud environment. They have noticed that some exclusions are no longer needed because the resources have been decommissioned, but the exclusions are still in place. The team wants to clean up the exclusions to reduce the attack surface. What is the best way to identify which exclusions are no longer needed?

   • AReview the exclusion list and check if the resource is still in use based on its region.
   • BReview the exclusion list and check if the resource is still in use based on its tags.
   • CUse the CrowdStrike console to identify exclusions that reference resources that no longer exist.
   • DReview the exclusion list and manually check if each resource still exists.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a type of scan exclusion available in CrowdStrike cloud security?

   • AExclusion by user account
   • BExclusion by operating system
   • CExclusion by resource ID
   • DExclusion by IP address range
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a security implication of excluding a resource from cloud security scans?

   • AThe resource will not be assessed for misconfigurations or vulnerabilities
   • BThe resource is automatically moved to a secure environment
   • CThe resource will be scanned more thoroughly than others
   • DThe resource becomes immune to all threats
   Reveal Solution Discussion Select an answer first