5.4 Explain the Deployment and Configuration of Cortex Cloud Application Security IDE Plugins (i.e., VS Code, JetBrains) CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A developer installs the Cortex Cloud IDE plugin but receives an authentication error when trying to connect. What is the most likely cause?

   • AThe IDE theme is not compatible with the plugin
   • BThe developer's local time zone is incorrect
   • CThe API key is invalid or expired
   • DThe code file is too large to scan
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A developer reports that the Cortex Cloud IDE plugin in VS Code is not showing any findings after a scan completes successfully. The developer confirms that the project contains known vulnerabilities. Which of the following is the most likely cause of this issue?

   • AThe plugin's scan scope is set to 'Open files only', but the developer has no files open in the editor.
   • BThe plugin is connected to the wrong Cortex Cloud tenant, so it is scanning a different project.
   • CThe plugin is configured with a severity filter that excludes the severity level of the known vulnerabilities.
   • DThe developer's IDE is in offline mode, so the plugin cannot send scan results to the Cortex Cloud service.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A developer at your company installs the Cortex Cloud IDE plugin for VS Code from the marketplace, but when they open the extension panel, they see a message that the plugin cannot reach the Cortex Cloud service. The developer is on a corporate laptop that uses a proxy for all outbound HTTPS traffic. The developer has not yet entered any credentials. What should you instruct the developer to do first?

   • AReinstall the plugin from the marketplace to ensure the extension files were not corrupted during the initial installation.
   • BConfigure the corporate proxy settings in the plugin's configuration file so the plugin can reach the Cortex Cloud API endpoints.
   • CEnter the Cortex Cloud tenant URL and API key in the plugin settings, because authentication must be completed before any network connection is attempted.
   • DDisable the corporate firewall temporarily to allow the plugin to connect directly to the Cortex Cloud service.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A developer is using the Cortex Cloud IDE plugin in JetBrains IntelliJ IDEA. After running a scan on a Python project, the plugin reports a high-severity SQL injection finding in a file the developer has not modified. The developer wants to focus only on issues in the code they are currently working on. Which configuration change should the developer make before re-running the scan?

   • ADisable the 'Scan on save' option so the plugin only scans when the developer explicitly requests it.
   • BChange the notification preference to 'Errors only' so the plugin only displays findings that block compilation.
   • CSet the scan scope to 'Changed files only' so the plugin only analyzes files that differ from the last commit.
   • DIncrease the severity filter to 'Critical' so lower-severity findings in other files are hidden from the results.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security engineer is setting up the Cortex Cloud IDE plugin for a team of developers. The team uses both VS Code and JetBrains IDEs. The engineer wants to ensure that all developers authenticate to the same Cortex Cloud tenant without requiring each developer to manually enter credentials. Which approach should the engineer use?

   • AHave each developer authenticate via a web browser SSO flow that the plugin initiates on first use.
   • BCreate a single shared API key and distribute it to all developers so they can paste it into their IDE plugin configuration.
   • CConfigure the plugin to use the developer's local machine credentials to authenticate to Cortex Cloud automatically.
   • DProvide each developer with a personal API key generated from the Cortex Cloud console and instruct them to enter it in the plugin settings.
   Reveal Solution Discussion Select an answer first