7.2 Describe the Purpose and Use Requirements of Scheduled Reports for Cloud Security CCCS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the first step to act on findings from a scheduled cloud security report?

   • AContact the cloud provider's support team.
   • BReview the report to identify critical misconfigurations or threats.
   • CDisable the scheduled report to prevent further alerts.
   • DImmediately delete all affected cloud resources.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A scheduled report lists a critical finding: a database is publicly accessible. The report also shows that the finding has been 'open' for 30 days. What does this indicate, and what is the best action?

   • AThe finding is a false positive because it has been open for so long.
   • BThe database is not important because it has been open for 30 days without incident.
   • CThe issue has not been remediated; prioritize it for immediate action.
   • DThe report is not updating correctly; check the report schedule.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security operations center (SOC) operates 24/7 and needs to review cloud misconfigurations at the start of each shift. They have three shifts: 00:00, 08:00, and 16:00. What is the most efficient scheduling approach?

   • ARun one report daily at 08:00 and have the other shifts rely on that data.
   • BCreate one scheduled report that runs three times a day at the shift start times.
   • CCreate three separate reports, one for each shift, with identical content.
   • DRun a report every hour to ensure all shifts have the latest data.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A scheduled report shows a critical misconfiguration that was remediated last week, but it appears again this week. The team suspects the fix was not applied correctly. What is the best way to use the report to confirm this?

   • AAssume the fix failed and reapply the same remediation.
   • BDelete the report because it is clearly not working.
   • CCompare the current report with last week's report to see if the finding details (e.g., resource ID) are identical.
   • DIgnore the finding because it was already fixed once.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A global company has teams in three time zones. They need a single scheduled report that provides a daily summary of misconfigurations, but each team wants it at the start of their local workday. What is the most practical solution?

   • ACreate three separate scheduled reports, each with the same content but different delivery times.
   • BCreate one report that runs at a single time and rely on email delays to reach all teams.
   • CCreate one report and have each team check the Falcon console when they arrive.
   • DCreate one report that runs at midnight UTC and hope it works for all.
   Reveal Solution Discussion Select an answer first