2.1 Explain the Onboarding and Configuration Process for Cloud Provider Resources (e.g., AWS, Azure, GCP, OCI) CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a large number of AWS EC2 instances and Azure VMs that are critical to production. The security team is concerned about the performance impact of installing agents on these workloads. They want to assess vulnerabilities and compliance without disrupting operations. What should they use?

   • AAgentless scanning, which uses snapshots of the workloads to assess them without installing software.
   • BAudit log integration, which can identify vulnerabilities from log data.
   • CContainer registry scanning, which can assess VMs without agents.
   • DCortex XSIAM, which can analyze workloads directly without any configuration.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security operations team is using Cortex XSIAM to monitor their multi-cloud environment. They have onboarded AWS, Azure, and GCP and are ingesting CloudTrail, Activity Log, and Audit Logs. The team wants to correlate a suspicious IAM action in AWS with a related network event in Azure to investigate a potential cross-cloud attack. What is the primary benefit of using Cortex XSIAM for this investigation?

   • AIt replaces the need for native cloud audit logs by generating its own telemetry.
   • BIt provides a unified data model that enables correlation of telemetry from different cloud providers in a single query.
   • CIt automatically remediates the suspicious IAM action without analyst intervention.
   • DIt stores all cloud logs in a single cloud provider to simplify access.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has a hybrid environment with workloads in AWS and on-premises in a data center that has no direct internet connectivity. They want to use Prisma Cloud to scan the on-premises workloads for vulnerabilities. What should they deploy?

   • ACloud scan, which can scan on-premises workloads from the cloud.
   • BCortex XSIAM, which can scan on-premises workloads directly.
   • CPrisma Cloud Outpost, which provides on-premises scanning capabilities for workloads in isolated environments.
   • DAgentless scanning, which can scan on-premises workloads without any additional deployment.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a typical capability of a Data Security Posture Management (DSPM) solution?

   • AManaging user identities and access permissions in the cloud
   • BEncrypting data at rest in cloud storage automatically
   • CScanning storage buckets and databases for sensitive data patterns
   • DProviding a web application firewall (WAF) for cloud applications
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is onboarding a new AWS account that was recently added to their AWS Organization. They have already onboarded the management account with auto-onboarding enabled. However, they notice that the new account is not appearing in Prisma Cloud. What is the most likely cause?

   • AThe auto-onboarding process has not yet run, or the new account lacks the required IAM role for Prisma Cloud.
   • BThe new account has a different billing structure that Prisma Cloud does not support.
   • CThe new account has not been added to the CloudTrail trail.
   • DThe new account is not in the same region as the management account.
   Reveal Solution Discussion Select an answer first