7.2 Describe the Purpose and Use Requirements of Scheduled Reports for Cloud Security CCCS Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A weekly scheduled report shows a repeating high-severity finding: an S3 bucket with public read access. The team has already remediated this bucket twice, but it reappears. What is the most appropriate first action?

   • ADelete the report because it is producing false positives.
   • BIgnore the finding because the team has already fixed it before.
   • CChange the report schedule to run less frequently to reduce noise.
   • DInvestigate whether the bucket is being re-created or modified by an automated process or IaC template.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is required by its cloud provider's shared responsibility model to regularly review its own security configurations. They want to use Falcon scheduled reports for this. What is the primary reason this is a good fit?

   • AScheduled reports provide a consistent, documented review of the customer's configurations, supporting their responsibility.
   • BScheduled reports shift the security responsibility to the cloud provider.
   • CScheduled reports automatically fix any misconfigurations found.
   • DScheduled reports are required by the cloud provider's SLA.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is creating a scheduled report for the first time. They have selected the report type and set the frequency. What else is required to ensure the report is useful?

   • AEnable real-time alerting for the report's findings.
   • BCreate a custom dashboard to visualize the report data.
   • CAssign the report to a Falcon user with admin privileges.
   • DDefine the scope (e.g., specific cloud accounts or resource groups) and the delivery method.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How should you use the data in a scheduled report to improve cloud security?

   • ABy using the report to replace real-time monitoring tools.
   • BBy forwarding the report to all employees for awareness.
   • CBy tracking trends over time to identify recurring issues and measure progress.
   • DBy ignoring low-severity findings to focus only on critical alerts.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team must demonstrate to auditors that cloud workload misconfigurations are being tracked over time. They currently rely on manual, ad-hoc checks. Which approach best fulfills the compliance requirement?

   • AEnable Falcon's real-time alerting and rely on the alert history as the only record.
   • BConfigure a scheduled report in Falcon that runs weekly and is delivered to the compliance team's email.
   • CAsk the compliance team to manually check the Falcon dashboard each week and keep their own notes.
   • DRun a one-time report now and save the PDF as evidence for the audit.
   Reveal Solution Discussion Select an answer first