6.5 Find Unmanaged, Public-Facing Cloud and Container Assets CCCS Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security analyst is reviewing a list of assets and needs to determine which are public-facing. They have metadata from CrowdStrike Falcon and the cloud provider. Which combination of metadata is most reliable for confirming public exposure?

   • AResource tags and resource group name
   • BInstance type and operating system
   • CPublic IP address and security group/NSG rules allowing inbound traffic from the internet
   • DIAM roles and permissions
   Reveal Solution Discussion Select an answer first
2. 2expert · hard · select all that apply

   A security team has identified several unmanaged public-facing assets. Which factors should they consider when prioritizing remediation? (Select all that apply.)

   • AThe asset's cost to the organization
   • BThe ease of exploitation based on the asset's configuration
   • CThe asset's compliance requirements
   • DThe sensitivity of data stored or processed by the asset
   • EThe asset's age
   Check answers Discussion Select an answer first
4. 3foundation · easy

   Which cloud asset is most likely to be public-facing?

   • AA storage bucket with a public read policy
   • BA database in a private subnet
   • CA container running in a cluster with no ingress configuration
   • DA virtual machine with a private IP address only
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization has multiple AWS accounts and Azure subscriptions. The security team needs to enumerate all cloud resources to find unmanaged assets. Which tool should they use to get a comprehensive inventory across all accounts and regions?

   • AAzure Resource Graph
   • BManual spreadsheet tracking
   • CCrowdStrike Falcon Cloud Security
   • DAWS Resource Groups & Tag Editor
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which scenario is the clearest example of an unmanaged cloud asset?

   • AA virtual machine that is enrolled in the corporate configuration management system and receives security updates
   • BA database that is part of the production environment and is backed up nightly
   • CA storage bucket that was created by a developer for testing and is not included in the organization's asset inventory or monitoring
   • DA container image that is stored in the organization's approved registry and scanned for vulnerabilities
   Reveal Solution Discussion Select an answer first