A security team manages a large AWS environment with thousands of resources. They need to exclude a set of legacy resources from scanning because they are scheduled for decommissioning. However, the team is concerned about the risk of excluding resources that are still in use. They want to implement a process that minimizes risk while allowing for the exclusions. What is the best approach?

Create exclusions only for resources that have been confirmed as decommissioned by the asset owner.

Create exclusions by region for all regions where legacy resources are located.

Create a broad exclusion for all legacy resources and review it quarterly.

Create exclusions by tag for all resources tagged 'Legacy' and rely on the tag to be accurate.

A security admin needs to temporarily stop scanning a specific resource but wants to keep the exclusion for future use. What should they do?

Delete the exclusion and recreate it later

Change the exclusion to a different resource

Ignore the exclusion; it will expire automatically

CrowdStrikeCertified Cloud Specialist (CCCS)

Domain 2Objective 4

2.4 Configure Cloud Security Scan Exclusion Settings CCCS Practice Questions (Page 4)

Part of the Cloud Account Registration domain, which makes up ~15% of our current practice bank.

17questions here

4free pages

5concepts

Questions 16–17

16expert · hard
A security team manages a large AWS environment with thousands of resources. They need to exclude a set of legacy resources from scanning because they are scheduled for decommissioning. However, the team is concerned about the risk of excluding resources that are still in use. They want to implement a process that minimizes risk while allowing for the exclusions. What is the best approach?
Select an answer first
17foundation · easy
A security admin needs to temporarily stop scanning a specific resource but wants to keep the exclusion for future use. What should they do?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCCS” is a trademark of its owner, used for identification only.

2.4 Configure Cloud Security Scan Exclusion Settings CCCS Practice Questions (Page 4)

Questions 16–17

A security admin needs to temporarily stop scanning a specific resource but wants to keep the exclusion for future use. What should they do?

Keep studying — Cloud Account Registration