1.1 Explain the Benefits of CrowdStrike's Cloud Security Products and Services — Including Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWP), Application Security Posture Management (ASPM), Data Security Posture Management (DSPM), and Infrastructure as Code (laC) Security — and How They Work Together CCCS Practice Questions (Page 5)

Questions 21–24

1. 21application · medium

   A company has deployed Falcon Cloud Security (CSPM) and Falcon Cloud Workload Protection (CWP). They notice that CSPM flags a misconfigured security group, and CWP detects a suspicious process on a workload. How do these products work together to improve security?

   • ACSPM and CWP are redundant, so only one is needed for full coverage
   • BCSPM automatically remediates the misconfiguration, and CWP automatically blocks the suspicious process without human intervention
   • CCSPM identifies the misconfiguration, and CWP provides runtime threat detection, giving a complete view of both posture and active threats
   • DCSPM is used for runtime threats, and CWP is used for misconfigurations
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security team is evaluating CrowdStrike for a large Kubernetes deployment. They need to detect runtime threats in containers, but they also want to identify misconfigured cluster policies. They have a limited budget and must choose the most efficient product combination. What should they do?

   • AUse Falcon Cloud Workload Protection (CWP) for runtime threat detection and Falcon Cloud Security (CSPM) for cluster policy misconfigurations
   • BUse only Falcon Cloud Workload Protection (CWP) for both runtime threats and cluster policy misconfigurations
   • CUse Falcon Infrastructure as Code (IaC) Security for runtime threats and Falcon Data Security Posture Management (DSPM) for cluster policies
   • DUse Falcon Application Security Posture Management (ASPM) for runtime threats and Falcon Cloud Security (CSPM) for cluster policies
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a key benefit of CrowdStrike's Cloud Workload Protection (CWP)?

   • AIt prevents misconfigurations in cloud infrastructure templates
   • BIt classifies sensitive data in cloud databases
   • CIt provides a central view of application security risks
   • DIt secures workloads across multiple cloud platforms with unified threat detection
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a primary benefit of Data Security Posture Management (DSPM)?

   • AIt provides threat detection for cloud workloads
   • BIt discovers, classifies, and protects sensitive data across cloud environments
   • CIt manages the security posture of applications throughout their lifecycle
   • DIt scans infrastructure templates for misconfigurations
   Reveal Solution Discussion Select an answer first