5.2 Explain Rule and Policy Deployment and Management CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization uses an AI-based policy engine that recommends security guardrails. The engine recommends a guardrail that would restrict access to a sensitive database to only specific IP addresses. The security team wants to implement this guardrail. What is the most important step before deploying it to production?

   • AVerify that the recommended IP addresses are correct and that legitimate users will not be locked out.
   • BImplement the guardrail in a test environment and then deploy to production without further review.
   • CAsk the AI engine to provide a different recommendation that is less restrictive.
   • DDeploy the guardrail to production immediately to reduce the risk of unauthorized access.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of integrating a software composition analysis (SCA) tool into a CI/CD pipeline?

   • ATo scan the application's runtime environment for misconfigurations
   • BTo test the application's behavior against business logic flaws
   • CTo enforce coding standards and style guidelines
   • DTo identify vulnerabilities in third-party libraries and open-source components
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security team uses an AI-powered policy recommendation engine that analyzes application behavior and threat intelligence. The engine suggests a new guardrail that would block outbound traffic to a known malicious IP address range. The team wants to implement this guardrail in their production environment. What is the first step they should take?

   • ADeploy the guardrail immediately to all production firewalls to block the malicious traffic as soon as possible.
   • BAdd the guardrail to a test environment first, but only if the security team has time to monitor it for a week.
   • CReview the recommendation to ensure it aligns with the organization's security requirements and does not disrupt legitimate traffic.
   • DAsk the AI engine to generate a more detailed report explaining the reasoning behind the recommendation.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team manages policies for a CI/CD pipeline. They want to update a policy to require a new security check, but they are concerned about the impact on existing pipelines. What is the best practice for managing this policy update?

   • ATest the updated policy in a staging pipeline, then roll it out to production pipelines gradually.
   • BAsk all teams to update their pipelines manually to accommodate the new policy.
   • CUpdate the policy directly in production and monitor for failures.
   • DCreate a new policy version and leave the old one in place, but do not enforce the new one.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of enforcing security policies within a CI/CD pipeline?

   • ATo ensure only compliant code is deployed to production
   • BTo speed up the deployment process by skipping security checks
   • CTo replace the need for runtime security monitoring
   • DTo automatically fix all vulnerabilities in the code
   Reveal Solution Discussion Select an answer first