5.4 Explain the Deployment and Configuration of Cortex Cloud Application Security IDE Plugins (i.e., VS Code, JetBrains) CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is typically required to authenticate the Cortex Cloud IDE plugin with Cortex Cloud?

   • AThe developer's local machine password
   • BA valid Cortex Cloud API key or token
   • CA one-time SMS verification code
   • DThe organization's Active Directory domain credentials
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A scan initiated from the Cortex Cloud IDE plugin fails to return any results. What is a common troubleshooting step?

   • ADisable the firewall on the developer's machine
   • BChange the IDE's color scheme
   • CCheck the plugin's log files for error messages
   • DReinstall the operating system
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security team is evaluating the Cortex Cloud IDE plugin for a new development initiative. The team wants to reduce the number of security issues that reach the production environment. Which benefit of the IDE plugin directly supports this goal?

   • AIt automatically patches vulnerabilities in the codebase without requiring developer intervention.
   • BIt automatically blocks code commits that contain security findings, preventing vulnerable code from being merged.
   • CIt provides developers with immediate feedback on security issues as they write code, allowing them to fix issues before code is committed.
   • DIt replaces the need for a separate SAST tool in the CI/CD pipeline, simplifying the security toolchain.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary purpose of the remediation workflow in the Cortex Cloud IDE plugin?

   • ATo automatically deploy the fixed code to production
   • BTo generate a compliance report for auditors
   • CTo block the developer from committing code until all issues are fixed
   • DTo provide step-by-step guidance and tools to fix security issues directly in the editor
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   A developer is using the Cortex Cloud IDE plugin in VS Code and runs a scan on a large monorepo. The scan takes a long time and the developer notices that the plugin is scanning files that are not part of the current feature branch. The developer wants to speed up the scan and focus only on the code they are actively working on. Which configuration change should the developer make?

   • ADisable the 'Scan on save' option so the plugin only scans when the developer explicitly requests it.
   • BChange the scan scope to 'Changed files only' so the plugin only scans files that differ from the main branch.
   • CIncrease the severity filter to 'Critical' so the plugin skips scanning files that do not contain critical issues.
   • DReduce the plugin's timeout setting so the scan stops after a shorter period, even if it is incomplete.
   Reveal Solution Discussion Select an answer first