3.1 Given a Use Case, Configure CSPM Policies CCCS Practice Questions (Page 3)

Questions 11–14

1. 11foundation · easy

   When configuring a CSPM policy, which setting determines how urgently the policy findings should be addressed?

   • ASeverity level
   • BPolicy name
   • CResource group
   • DEnforcement action
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   You have configured a CSPM policy to detect Azure storage accounts with 'Allow blob public access' enabled. After running the policy, you notice that a storage account with 'Allow blob public access' enabled is not being flagged. You have verified that the storage account is in the assigned resource group. What is the most likely reason for this?

   • AThe policy severity is set to Low, so it is hidden from the main findings view.
   • BThe storage account has a private endpoint configured, which makes it exempt from the public access check.
   • CThe storage account was created after the last policy scan, and the scan has not run again.
   • DThe policy is using a check for 'Allow blob anonymous access' instead of 'Allow blob public access'.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which action best verifies that a CSPM policy is effectively reporting compliance issues?

   • AChanging the policy's severity to 'critical'
   • BAssigning the policy to more resources
   • CReviewing the policy's findings in the CSPM dashboard
   • DDeleting the policy and recreating it
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A CSPM policy must be applied only to a specific set of cloud resources. What is the most direct way to achieve this?

   • ACreate a new policy for each resource
   • BEnable the policy's auto-remediation
   • CSet the policy's severity to 'low'
   • DAssign the policy to the resource group containing those resources
   Reveal Solution Discussion Select an answer first