1.1 Explain the Benefits of CrowdStrike's Cloud Security Products and Services — Including Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWP), Application Security Posture Management (ASPM), Data Security Posture Management (DSPM), and Infrastructure as Code (laC) Security — and How They Work Together CCCS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a key benefit of CrowdStrike's ASPM?

   • AIt protects cloud workloads from malware at runtime
   • BIt monitors cloud infrastructure for compliance risks
   • CIt provides a unified view of application security risks across the development lifecycle
   • DIt classifies sensitive data in cloud databases
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A DevOps team uses Terraform to provision Azure resources. They want to prevent insecure configurations from reaching production. Which CrowdStrike capability should they integrate into their CI/CD pipeline?

   • AFalcon Infrastructure as Code (IaC) Security to scan Terraform templates before deployment
   • BFalcon Cloud Workload Protection (CWP) to monitor the CI/CD pipeline for threats
   • CFalcon Cloud Security (CSPM) to scan deployed resources after provisioning
   • DFalcon Data Security Posture Management (DSPM) to classify data in the templates
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security team wants to reduce the risk of misconfigurations in their Google Cloud environment. They plan to use Falcon Cloud Security (CSPM) for continuous monitoring and Falcon Infrastructure as Code (IaC) Security for template scanning. What is the primary benefit of using both together?

   • AIaC security is only useful for AWS, while CSPM is only useful for Azure
   • BIaC security prevents misconfigurations before deployment, while CSPM detects and remediates misconfigurations in the live environment
   • CCSPM scans templates, and IaC security monitors the live environment
   • DBoth products are redundant, so using both provides no additional benefit
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How do CSPM, CWP, ASPM, DSPM, and IaC security work together to provide comprehensive cloud security coverage?

   • AThey replace the need for traditional security controls
   • BThey address different layers of cloud security, from infrastructure configuration to application and data protection
   • CThey only work when deployed together in a specific order
   • DThey all focus on the same security issue but with different tools
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a primary benefit of Infrastructure as Code (IaC) security?

   • AIt discovers and classifies sensitive data in cloud storage
   • BIt scans infrastructure templates to prevent misconfigurations before deployment
   • CIt manages the security posture of applications throughout their lifecycle
   • DIt provides runtime threat detection for cloud workloads
   Reveal Solution Discussion Select an answer first