5.4 Explain the Deployment and Configuration of Cortex Cloud Application Security IDE Plugins (i.e., VS Code, JetBrains) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When configuring the Cortex Cloud IDE plugin, how does the plugin know which tenant to connect to?

   • AIt uses the tenant URL or region specified in the plugin settings
   • BIt automatically detects the tenant from the user's local network
   • CIt derives the tenant from the project's Git remote URL
   • DIt asks the user to select a tenant from a dropdown each time they scan
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which action would a developer take to apply a suggested fix from the Cortex Cloud IDE plugin?

   • ARun a system update on the developer's machine
   • BClick the 'Apply Fix' or 'Quick Fix' button next to the finding
   • CDelete the entire file and rewrite it from scratch
   • DCopy the finding details into a ticket and assign it to another developer
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company uses a CI/CD pipeline that runs security scans on every pull request. A developer wants to see the same security findings in their IDE before pushing code to the repository. How does the Cortex Cloud IDE plugin help with this workflow?

   • AThe plugin replaces the CI/CD pipeline scan, so the pipeline no longer needs to run security checks.
   • BThe plugin runs the same scan engines as the CI/CD pipeline, so findings seen locally are consistent with what the pipeline will report.
   • CThe plugin automatically triggers the CI/CD pipeline from the IDE and displays the results in a separate panel.
   • DThe plugin only displays findings that have already been reported by the CI/CD pipeline, so the developer sees the same results after pushing code.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a common way the Cortex Cloud IDE plugin integrates with CI/CD for continuous security feedback?

   • ABy preventing any code from being committed unless the IDE is open
   • BBy storing all scan results only on the developer's local machine
   • CBy sharing scan results and policies with the pipeline so both use consistent security rules
   • DBy requiring the pipeline to be paused while the IDE is open
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How does the Cortex Cloud IDE plugin complement CI/CD pipeline security scanning?

   • AIt provides earlier feedback to developers before code reaches the pipeline
   • BIt replaces the need for CI/CD scanning entirely
   • CIt only works when the CI/CD pipeline is not running
   • DIt automatically fixes all issues found in the CI/CD pipeline
   Reveal Solution Discussion Select an answer first