A security team wants to ensure that no storage buckets in their cloud environment are publicly readable. Which type of CSPM policy should they apply?

A policy that monitors for unusual user login patterns

A policy that enforces multi-factor authentication for all users

A policy that quarantines malicious files detected in storage

A policy that checks for overly permissive access settings

An organization needs to verify that all virtual machines are using a specific operating system version to meet compliance. Which CSPM policy use case does this represent?

Automatically patching VMs that are out of date

Monitoring network traffic to and from the VMs

Detecting real-time intrusion attempts on the VMs

Detecting configuration drift from a security baseline

You have configured a CSPM policy to detect Azure VMs that do not have 'Boot diagnostics' enabled. After running the policy, you notice that some VMs are not being flagged even though they have Boot diagnostics disabled. What is the most likely reason for this?

The policy is set to 'Alert' instead of 'Remediate', so it does not report findings.

The VMs are using managed disks, which are exempt from the Boot diagnostics requirement.

The policy is not assigned to the resource group or subscription that contains those VMs.

The policy severity is set to Low, so it is hidden from the main findings view.

CrowdStrikeCertified Cloud Specialist (CCCS)

Domain 3Objective 1

3.1 Given a Use Case, Configure CSPM Policies CCCS Practice Questions (Page 1)

Part of the Cloud Security Policies and Rules domain, which makes up ~11% of our current practice bank.

14questions here

3free pages

4concepts

Questions 1–5

1foundation · easy
A CSPM policy is configured to automatically remediate a misconfiguration. Which setting controls this behavior?
Select an answer first
2foundation · easy
A security team wants to ensure that no storage buckets in their cloud environment are publicly readable. Which type of CSPM policy should they apply?
Select an answer first
3foundation · easy
An organization needs to verify that all virtual machines are using a specific operating system version to meet compliance. Which CSPM policy use case does this represent?
Select an answer first
4application · medium
You have configured a CSPM policy to detect Azure VMs that do not have 'Boot diagnostics' enabled. After running the policy, you notice that some VMs are not being flagged even though they have Boot diagnostics disabled. What is the most likely reason for this?
Select an answer first
5foundation · easy
Which of the following is a valid scope for applying a CSPM policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCCS” is a trademark of its owner, used for identification only.

3.1 Given a Use Case, Configure CSPM Policies CCCS Practice Questions (Page 1)

Questions 1–5

A CSPM policy is configured to automatically remediate a misconfiguration. Which setting controls this behavior?

A security team wants to ensure that no storage buckets in their cloud environment are publicly readable. Which type of CSPM policy should they apply?

An organization needs to verify that all virtual machines are using a specific operating system version to meet compliance. Which CSPM policy use case does this represent?

You have configured a CSPM policy to detect Azure VMs that do not have 'Boot diagnostics' enabled. After running the policy, you notice that some VMs are not being flagged even though they have Boot diagnostics disabled. What is the most likely reason for this?

Which of the following is a valid scope for applying a CSPM policy?

Keep studying — Cloud Security Policies and Rules