1.1 Evaluate the Existing Cloud and IT Infrastructure to Align with Cortex Cloud Architecture (i.e., Multicloud Footprint, Workload Inventory, Cloud-Native Application Protection Platform [CNAPP] Tooling, Migration) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company uses a CNAPP tool that is deeply integrated with their CI/CD pipeline for AWS workloads. They are considering Cortex Cloud for its advanced features. The security team wants to maintain CI/CD integration while adopting Cortex Cloud. What should they do?

   • AEvaluate Cortex Cloud's CI/CD integration capabilities and compare them with the existing tool's integration.
   • BImmediately replace the existing CNAPP tool with Cortex Cloud, assuming it has similar CI/CD integration.
   • CKeep the existing CNAPP tool for CI/CD and use Cortex Cloud for other security functions.
   • DDisable CI/CD integration to simplify the migration.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company has a large number of workloads, including VMs, containers, and serverless functions, across AWS and Azure. They currently use a CNAPP tool that provides excellent visibility into VMs but has limited support for containers and serverless. They are evaluating Cortex Cloud. The security team wants to minimize the number of tools while ensuring full coverage. What should they do?

   • ADeploy Cortex Cloud and gradually migrate all workloads to it, using the existing CNAPP tool only for VMs during the transition.
   • BKeep the existing CNAPP tool for VMs and use Cortex Cloud only for containers and serverless.
   • CUse Cortex Cloud for all workloads and decommission the existing tool immediately.
   • DImmediately replace the existing CNAPP tool with Cortex Cloud for all workloads.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company uses Azure Arc to manage servers and Kubernetes clusters across on-premises and Azure. They are planning to deploy Cortex Cloud and want to ensure all resources are included in the workload inventory. What should they do?

   • AOnly include resources that are running in Azure, not on-premises.
   • BInclude resources managed by Azure Arc in the workload inventory, as they are part of the overall cloud footprint.
   • CDeploy Cortex Cloud only to Azure resources and ignore on-premises.
   • DExclude Azure Arc resources because they are not in the cloud.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company operates workloads in AWS (us-east-1, eu-west-1) and Azure (eastus, westeurope). They are planning to deploy Cortex Cloud and need to understand the full scope of their multicloud footprint. The security team has already exported a list of all VMs and containers from each cloud provider's native inventory tools. What is the next most important step to align with Cortex Cloud architecture?

   • AMap the network topology, including VPCs, VNets, and any on-premises connectivity, to understand data flows and potential coverage gaps.
   • BReplace all existing cloud-native security tools with Cortex Cloud to avoid duplication.
   • CImmediately onboard all discovered VMs and containers into Cortex Cloud to begin protection.
   • DCreate a new Azure subscription and AWS account dedicated to Cortex Cloud management.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a key component to document when assessing the multicloud footprint for Cortex Cloud alignment?

   • AThe version of the operating system on each developer's laptop
   • BThe list of all cloud regions and availability zones where workloads are deployed
   • CThe company's marketing budget for the next fiscal year
   • DThe number of employees in the IT department
   Reveal Solution Discussion Select an answer first