3.5 Explain the Creation and Management of Vulnerability Policies (i.e., Issue Creation and Prevention) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In Prisma Cloud, which of the following is a valid step in the vulnerability policy creation process?

   • AConfiguring the cloud account credentials for scanning
   • BAssigning the policy to a specific user role
   • CUploading a list of known vulnerabilities to be ignored
   • DSelecting the policy type and defining the criteria that trigger the policy
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When creating a vulnerability policy in Prisma Cloud, which criteria can be specified to define the scope of the policy?

   • ASeverity, package type, and affected assets
   • BAlert severity, notification channel, and escalation time
   • COperating system version, CPU architecture, and memory usage
   • DCloud provider, region, and billing account
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In Prisma Cloud, what happens when a vulnerability matches the criteria of an enabled policy?

   • AThe policy is disabled to prevent further alerts
   • BThe asset is immediately deleted
   • CThe vulnerability is automatically patched
   • DAn issue is created for the affected asset
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A vulnerability policy is configured to create issues for high-severity vulnerabilities in container images. A new scan finds a high-severity vulnerability in an image that was previously clean. What will happen?

   • AThe issue will be created only after manual approval from the security team.
   • BNo issue will be created because the image was previously clean.
   • CA new issue will be created for the vulnerability because it matches the policy criteria.
   • DThe issue will be created only if the vulnerability is also present in the image's base layer.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of configuring auto-remediation on a vulnerability policy in Prisma Cloud?

   • ATo automatically update the policy criteria based on new threat intelligence
   • BTo automatically delete all vulnerabilities from the affected asset
   • CTo automatically apply a predefined remediation action when the policy is triggered
   • DTo automatically send an email to the security team
   Reveal Solution Discussion Select an answer first