4.4 Identify Vulnerabilities and Installed Packages CCCS Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A cloud operations team manages a fleet of Linux containers in AWS ECS. They need to enumerate all installed packages across the container images to identify outdated libraries before deployment. The team has CrowdStrike Falcon Cloud Workload Protection enabled. Which approach best leverages CrowdStrike's pre-runtime capabilities to meet this requirement?

   • AConfigure AWS Inspector to send findings to Falcon for package analysis.
   • BSSH into each running container and run a package manager query to list installed software.
   • CUse Falcon's image assessment to scan the container images in the registry and review the package inventory.
   • DReview the ECS task definitions to infer installed packages from the base image name.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A cloud security team wants to prioritize remediation efforts across their Azure VM fleet. They have Falcon vulnerability data showing that some VMs have critical vulnerabilities in packages that are actively exploited in the wild. Which approach should they use to prioritize which VMs to remediate first?

   • APrioritize VMs with vulnerabilities that have known exploit activity and are marked as critical in Falcon.
   • BSort the vulnerability findings by CVSS score and remediate the highest scores first.
   • CRemediate VMs in alphabetical order to ensure all are addressed equally.
   • DFocus only on VMs that have triggered runtime alerts in the past month.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security analyst is investigating a potential vulnerability in a container image that is scheduled for deployment. The analyst wants to know if the image contains a specific package with a known CVE before it is deployed. The image is stored in a private registry. What is the most efficient way to check this using Falcon?

   • ADeploy the image to a test environment and wait for the Falcon sensor to report vulnerabilities.
   • BUse a third-party container scanner that is not integrated with Falcon.
   • CScan the image in the registry using Falcon's image assessment and review the package list and CVEs.
   • DManually inspect the Dockerfile to determine if the package is installed.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the role of vulnerability and package data in CrowdStrike's pre-runtime protection for cloud workloads?

   • ATo enable automated remediation of vulnerabilities in running workloads
   • BTo inform policy decisions about which workloads are allowed to deploy
   • CTo support compliance reporting and audit trails
   • DTo provide real-time alerts for active attacks
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which CrowdStrike capability is primarily used to identify vulnerabilities in cloud workloads before they are deployed or run?

   • AFalcon Discover
   • BFalcon Cloud Security pre-runtime scanning
   • CFalcon Cloud Workload Protection
   • DFalcon Spotlight
   Reveal Solution Discussion Select an answer first