A security team discovers that a virtual machine has not been patched for over a year. How should this finding be classified?

As an indicator of misconfiguration (IOM)

Which of the following is an example of a vulnerability in a cloud environment?

A database with encryption enabled at rest

A storage bucket with a complex access policy

A virtual machine running an outdated operating system with known security flaws

A network security group that restricts inbound traffic to specific ports

A security analyst notices that diagnostic logging is disabled on several Azure resources. How should this be classified?

As a vulnerability in the application code

As a high-risk practice unrelated to configuration

As a normal operational setting with no security impact

As an indicator of misconfiguration (IOM)

A cloud administrator is reviewing the configuration of a Kubernetes cluster. The cluster has a network policy that allows all traffic between all pods. The security team wants to implement a least-privilege network model. Which configuration change should be made?

Enable audit logging for the cluster

Create network policies that restrict traffic to only the necessary paths

Enable encryption for pod-to-pod traffic

CrowdStrikeCertified Cloud Specialist (CCCS)

Domain 6Objective 1

6.1 Evaluate Cloud Security Controls and Configurations to Identify Indicators of Misconfiguration (IOMs), Vulnerabilities And/or High-Risk Practices CCCS Practice Questions (Page 4)

Part of the Findings and Detection Analysis domain, which makes up ~22% of our current practice bank.

25questions here

5free pages

6concepts

Questions 16–20

16foundation · easy
A security team discovers that a virtual machine has not been patched for over a year. How should this finding be classified?
Select an answer first
17foundation · easy
Which of the following is an example of a vulnerability in a cloud environment?
Select an answer first
18foundation · easy
A security analyst notices that diagnostic logging is disabled on several Azure resources. How should this be classified?
Select an answer first
19application · medium
A cloud administrator is reviewing the configuration of a Kubernetes cluster. The cluster has a network policy that allows all traffic between all pods. The security team wants to implement a least-privilege network model. Which configuration change should be made?
Select an answer first
20application · medium
A security analyst is reviewing a cloud environment and finds that a virtual machine has a disk that is not encrypted. The VM is used for a development environment and does not contain sensitive data. Which finding should the analyst report?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCCS” is a trademark of its owner, used for identification only.