6.5 Find Unmanaged, Public-Facing Cloud and Container Assets CCCS Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company runs containerized workloads in Amazon EKS and Azure Kubernetes Service (AKS). The security team wants to identify unmanaged container assets that are public-facing. Which approach should they use?

   • AUse CrowdStrike Falcon to inventory container images, running containers, and Kubernetes workloads, then check for public exposure via load balancers or ingress rules.
   • BUse kubectl to list all pods in each cluster and manually check for public IPs.
   • CReview the cloud provider's load balancer list and assume all are public-facing.
   • DScan the container registry for images with known vulnerabilities and assume they are unmanaged.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst is correlating metadata from CrowdStrike Falcon, AWS Config, and the CMDB to identify unmanaged assets. They find an EC2 instance that appears in Falcon but not in AWS Config or the CMDB. What should they conclude?

   • AThe instance is unmanaged and should be investigated for potential security risks.
   • BThe instance is managed because Falcon is a security tool.
   • CThe instance is a false positive and should be ignored.
   • DThe instance is not public-facing because it is not in AWS Config.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of enumerating cloud assets across accounts and regions?

   • ATo identify all cloud resources so that unmanaged ones can be discovered
   • BTo automatically remediate misconfigured resources
   • CTo compare costs across different cloud providers
   • DTo reduce the number of cloud accounts in the organization
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst is reviewing a list of cloud assets and needs to determine which ones are public-facing. The company has a mix of EC2 instances, S3 buckets, and Azure VMs. Which combination of metadata should the analyst use to confirm public exposure?

   • ANetwork ACLs, security group rules, and public IP addresses
   • BBilling tags, cost center, and owner email
   • CIAM roles, resource group, and region
   • DInstance type, operating system, and tags
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which item is a container orchestration workload that may need to be enumerated?

   • AA virtual network interface
   • BA managed database instance
   • CA serverless function
   • DA Kubernetes deployment
   Reveal Solution Discussion Select an answer first