3.5 Explain the Creation and Management of Vulnerability Policies (i.e., Issue Creation and Prevention) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A vulnerability policy is generating issues for a specific test environment that the security team does not want to monitor. They want to stop issues for that environment without affecting other environments. What should they configure?

   • ADelete the policy and recreate it without the test environment.
   • BChange the policy severity to 'Critical'.
   • CDisable the policy and create a new one for other environments.
   • DAdd an exclusion rule for the test environment assets.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A vulnerability policy is configured to alert on medium-severity vulnerabilities. The team wants to automatically resolve issues that are no longer detected in subsequent scans. Which policy setting should be enabled?

   • ADisable the policy and re-enable it after a scan.
   • BEnable auto-remediation for the policy.
   • CIncrease the alerting severity threshold to 'High'.
   • DAdd an exclusion rule for the affected assets.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why is it important to test a vulnerability policy against sample data before deploying it?

   • ATo generate a compliance report for auditors
   • BTo increase the policy's severity level
   • CTo automatically enable the policy in all environments
   • DTo validate that the policy behaves as expected and does not generate false positives
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement best describes how vulnerability policies contribute to issue prevention in Prisma Cloud?

   • AThey automatically remediate vulnerabilities by applying vendor patches
   • BThey can enforce compliance gates that block deployments when vulnerabilities exceed defined thresholds
   • CThey eliminate the need for runtime monitoring by scanning images at rest
   • DThey prevent vulnerabilities by isolating affected containers from the network
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which action is part of managing an existing vulnerability policy in Prisma Cloud?

   • AChanging the cloud account credentials
   • BDisabling the policy temporarily during maintenance
   • CDeleting all issues created by the policy
   • DModifying the scan schedule
   Reveal Solution Discussion Select an answer first