6.4 Demonstrate Knowledge of Authentication Failure Resolution (OAuth / PAT) and Webhook Delivery Issues When Connecting Version Control Systems (VCS) (e.g., GitHub, GitLab) and CI/CD Systems (e.g., Jenkins) to Cortex Cloud CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A Jenkins pipeline uses a PAT to authenticate to GitHub for cloning repositories. The pipeline fails with 'Authentication failed' and the Jenkins log shows 'HTTP 401 Unauthorized'. The PAT was just created. What is the most likely cause?

   • AThe PAT was not granted the 'repo' scope.
   • BThe PAT is being used with a GitHub App instead of a personal account.
   • CThe Jenkins server's IP is not allowlisted in GitHub.
   • DThe PAT was created with an expiration date of 1 day.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In Cortex Cloud logs, an integration error shows 'invalid_grant'. What does this error typically indicate?

   • AThe PAT has insufficient scopes.
   • BThe webhook payload is malformed.
   • CThe webhook endpoint is unreachable.
   • DThe OAuth authorization code has expired or has already been used.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A GitLab webhook is configured to send push events to Cortex Cloud. The webhook is failing with 'SSL certificate verification failed'. The webhook URL uses a self-signed certificate. What is the most appropriate solution?

   • AUse HTTP instead of HTTPS for the webhook URL.
   • BDisable SSL verification in GitLab for this webhook.
   • CAdd the self-signed certificate to GitLab's trusted CA store.
   • DReplace the self-signed certificate with a certificate from a trusted CA.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A Cortex Cloud log entry for a webhook delivery shows 'HTTP 401 Unauthorized'. What does this error typically indicate?

   • AThe webhook event type is not supported.
   • BThe webhook URL is incorrect.
   • CThe webhook endpoint requires authentication and the credentials are missing or invalid.
   • DThe webhook payload is too large.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When reviewing a GitLab integration configuration in Cortex Cloud, which setting must match exactly between GitLab and Cortex Cloud to ensure webhook delivery?

   • AThe GitLab instance URL and the Cortex Cloud region.
   • BThe project name and the repository name.
   • CThe OAuth client ID and the PAT.
   • DThe webhook URL and secret token.
   Reveal Solution Discussion Select an answer first