5.4 Explain the Deployment and Configuration of Cortex Cloud Application Security IDE Plugins (i.e., VS Code, JetBrains) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How can a developer initiate a security scan using the Cortex Cloud IDE plugin?

   • ABy manually uploading the source code to the Cortex Cloud portal
   • BBy restarting the IDE with a special flag
   • CBy running a scan command from the plugin's context menu or command palette
   • DBy sending an email to the security team with the code attached
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A developer installed the Cortex Cloud IDE plugin in VS Code and successfully authenticated. However, when the developer runs a scan, the plugin displays an error: 'Unable to retrieve policy from Cortex Cloud.' The developer's network team confirms that the proxy and firewall allow traffic to the Cortex Cloud API. Which of the following is the most likely cause of this error?

   • AThe plugin is configured with the wrong tenant URL, so it is trying to fetch a policy from a different tenant.
   • BThe developer's IDE is in offline mode, preventing the plugin from reaching the Cortex Cloud service.
   • CThe plugin's scan scope is set to 'Open files only', which prevents the plugin from fetching the full project policy.
   • DThe API key used for authentication does not have the required permissions to fetch the security policy for the project.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How is the Cortex Cloud IDE plugin typically installed in VS Code?

   • ABy running a command-line script provided by Palo Alto Networks
   • BBy downloading a standalone installer from the Cortex Cloud portal
   • CBy copying plugin files directly into the VS Code installation directory
   • DBy searching for the extension in the VS Code Marketplace and clicking Install
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A developer is using the Cortex Cloud IDE plugin in VS Code and runs a scan on a JavaScript project. The plugin displays a finding for a cross-site scripting (XSS) vulnerability in a function. The developer wants to understand the vulnerability and see the recommended fix. What should the developer do?

   • ADisable the plugin and use a web browser to search for the vulnerability pattern in public documentation.
   • BRun the scan again with a higher severity filter to see if the plugin provides more details for critical findings.
   • CClick on the finding in the results panel to expand the details and view the remediation guidance provided by the plugin.
   • DOpen the Cortex Cloud web console and search for the finding ID to view the remediation guidance.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a key benefit of using the Cortex Cloud IDE plugin during development?

   • AIt automatically fixes all vulnerabilities without developer intervention
   • BIt provides immediate feedback on security issues as code is written
   • CIt eliminates the need for any manual code review
   • DIt guarantees that no security vulnerabilities will reach production
   Reveal Solution Discussion Select an answer first