2.1 Explain the Onboarding and Configuration Process for Cloud Provider Resources (e.g., AWS, Azure, GCP, OCI) CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A healthcare organization is onboarding its Azure subscription to Prisma Cloud. The compliance team needs to identify where protected health information (PHI) is stored across Blob Storage and Azure SQL databases, and they want to prioritize remediation based on data sensitivity. Which feature should the team use to meet this requirement?

   • AContainer registry scanning to check images in Azure Container Registry for embedded secrets.
   • BAgentless scanning to check for vulnerabilities in the operating systems of the Azure VMs.
   • CAudit log integration to analyze Azure Activity Logs for data access events.
   • DData Security Posture Management (DSPM) to automatically discover, classify, and label sensitive data across the cloud environment.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following best describes how Cortex XSIAM processes cloud telemetry?

   • AIt stores raw logs without any analysis for later manual review
   • BIt only ingests logs from on-premises sources
   • CIt applies analytics and machine learning to detect anomalies and threats
   • DIt requires manual correlation of events by security analysts
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a serverless function service that can be scanned by Prisma Cloud?

   • AGoogle Compute Engine
   • BAWS Lambda
   • CAmazon EC2
   • DAzure Virtual Machines
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary benefit of scanning container images in a registry?

   • AReducing the size of container images
   • BAutomatically patching vulnerabilities in images
   • CIdentifying vulnerabilities before images are deployed
   • DEliminating the need for runtime security monitoring
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is onboarding its GCP project into Prisma Cloud. The security team wants to ingest GCP Audit Logs to detect and respond to suspicious IAM activity in Cortex XSIAM. They have already created the project and enabled the necessary APIs. What is the next required step to enable audit log ingestion?

   • AEnable VPC Flow Logs to capture network traffic for analysis.
   • BCreate a service account with the required roles and grant it access to read the audit logs.
   • CConfigure a Cloud Storage bucket to store audit logs and provide Prisma Cloud with access to the bucket.
   • DDeploy a virtual machine in the project to forward audit logs to Prisma Cloud.
   Reveal Solution Discussion Select an answer first