1.1 Evaluate the Existing Cloud and IT Infrastructure to Align with Cortex Cloud Architecture (i.e., Multicloud Footprint, Workload Inventory, Cloud-Native Application Protection Platform [CNAPP] Tooling, Migration) CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–24

1. 21application · medium

   A company has workloads in Google Cloud Platform (GCP) and AWS. They are evaluating Cortex Cloud for deployment. The network team has provided a diagram showing VPCs in AWS and VPCs in GCP, but no direct connectivity between them. The security team wants to ensure Cortex Cloud can monitor all workloads. What should they consider?

   • AThey must establish a VPN or direct peering between AWS and GCP before deploying Cortex Cloud.
   • BThey should migrate all workloads to a single cloud to simplify monitoring.
   • CCortex Cloud cannot monitor GCP workloads, so they should only deploy in AWS.
   • DCortex Cloud can monitor workloads in both clouds independently, even without direct connectivity between them.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company has a multicloud environment with AWS and Azure. They are evaluating Cortex Cloud and want to understand how it will integrate with their existing security operations. They currently use AWS Security Hub and Azure Security Center. What should they consider?

   • ACortex Cloud only works with AWS, so Azure Security Center must be decommissioned.
   • BThey should use separate Cortex Cloud instances for each cloud provider.
   • CCortex Cloud can aggregate findings from these native tools to provide a unified view.
   • DThey must replace AWS Security Hub and Azure Security Center with Cortex Cloud.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company has a multicloud environment with AWS and Azure, and they are planning to deploy Cortex Cloud. They have a mix of workloads, some with strict data residency requirements that mandate data stay in a specific country. The network team has proposed using a single Cortex Cloud instance to manage both clouds. What should the security team consider?

   • AMigrate all workloads to a single cloud to avoid data residency issues.
   • BIgnore data residency because Cortex Cloud encrypts all data.
   • CUse separate Cortex Cloud instances for each cloud provider to meet data residency.
   • DEnsure that the Cortex Cloud instance is deployed in a region that meets the data residency requirements for all workloads.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is an example of a workload type that should be included in a workload inventory for Cortex Cloud?

   • AA DNS server configuration
   • BA cloud storage bucket
   • CA network firewall appliance
   • DA virtual machine running a web server
   Reveal Solution Discussion Select an answer first