3.5 Explain the Creation and Management of Vulnerability Policies (i.e., Issue Creation and Prevention) CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security team is managing a vulnerability policy that has been generating a high volume of issues. They suspect that many of these issues are false positives due to the scanner incorrectly identifying vulnerabilities in certain packages. They want to reduce the noise without missing real vulnerabilities. What should they do?

   • AAdd exclusion rules for the specific packages that are known to be false positives.
   • BDisable the policy and rely on manual review of scan results.
   • CIncrease the severity threshold to 'Critical' to reduce the number of issues.
   • DEnable auto-remediation to automatically resolve false positives.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Prisma Cloud, what is the primary role of a vulnerability policy?

   • ATo provide a compliance report for auditors without affecting runtime operations
   • BTo replace the need for vulnerability scanning by using static analysis of code repositories
   • CTo automatically patch all vulnerabilities found in the environment without manual intervention
   • DTo define rules that identify and respond to vulnerabilities, enabling both issue creation and prevention
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which action is an example of a vulnerability policy preventing a security issue?

   • ABlocking a container image from running if it has critical vulnerabilities
   • BNotifying the asset owner via email
   • CLogging the vulnerability in the audit trail
   • DCreating a ticket for the security team to review
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of versioning a vulnerability policy in Prisma Cloud?

   • ATo assign different policies to different users
   • BTo increase the policy's severity threshold
   • CTo automatically update the policy with new vulnerability data
   • DTo track changes and allow rollback to a previous configuration
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which configuration option can be set on a Prisma Cloud vulnerability policy to reduce noise from known acceptable risks?

   • AAuto-remediation
   • BAlerting frequency
   • CPolicy versioning
   • DExclusion rules
   Reveal Solution Discussion Select an answer first