2.5 Explain the Integration Process for Third-Party Static Application Security Testing (SAST) / Software Composition Analysis (SCA) Tools (e.g., Semgrep, Veracode, Generic SARIF) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which method is commonly used to automatically push scan results from a third-party SAST tool to Prisma Cloud as soon as a scan completes?

   • AWebhook
   • BManual CSV upload
   • CScheduled database replication
   • DEmail notification
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a common way to integrate a third-party SAST tool into a CI/CD pipeline for use with Prisma Cloud?

   • AReplace the CI/CD pipeline with the SAST tool's own scheduler.
   • BAdd a pipeline step that runs the SAST tool and uploads the SARIF output to Prisma Cloud.
   • CUse the SAST tool to deploy the application to production.
   • DManually copy the SAST results to a shared drive after each build.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why is it necessary to map third-party SAST findings to Prisma Cloud's vulnerability schema?

   • ATo ensure consistent reporting and correlation across different tools.
   • BTo make the third-party tool's output human-readable.
   • CTo convert all findings to a single severity level.
   • DTo delete duplicate findings automatically.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When configuring Semgrep to integrate with Prisma Cloud, which command-line option ensures the output is in a format that Prisma Cloud can consume?

   • A--text
   • B--yaml
   • C--sarif
   • D--json
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A software company uses GitHub Actions for CI/CD. They want to integrate Semgrep SAST scans with Prisma Cloud so that pull request findings are automatically visible in Prisma Cloud. Which integration point should they use?

   • AUse the GitHub Marketplace Prisma Cloud app to automatically scan all pull requests without any workflow changes.
   • BSchedule a separate Jenkins job that polls GitHub for new pull requests and runs Semgrep.
   • CConfigure a GitHub webhook that sends the raw repository code to Prisma Cloud for scanning.
   • DAdd a step in the GitHub Actions workflow that runs Semgrep and then uses the Prisma Cloud CLI to submit the SARIF output.
   Reveal Solution Discussion Select an answer first