2.1 Explain the Onboarding and Configuration Process for Cloud Provider Resources (e.g., AWS, Azure, GCP, OCI) CLOUD-SECURITY-ENGINEER Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   A company is onboarding its AWS organization into Prisma Cloud. The security team wants to ensure that CloudTrail logs from all accounts, including those created in the future, are automatically ingested for analysis in Cortex XSIAM. The organization has AWS Organizations enabled. What is the most efficient onboarding approach?

   • AOnboard only the management account and rely on its CloudTrail to capture events from all member accounts by default.
   • BManually onboard each existing member account individually and create a separate CloudTrail integration for each account.
   • COnboard the AWS Organizations management account and enable the 'Auto-onboard new accounts' option, then configure the CloudTrail integration at the organization level.
   • DUse AWS Config instead of CloudTrail to collect API activity and send it to Cortex XSIAM for analysis.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a common method for scanning serverless functions for security issues?

   • AAnalyzing the function's source code and configuration
   • BTaking a snapshot of the function's underlying VM
   • CPerforming a network port scan of the function's endpoint
   • DInstalling an agent inside the function runtime
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is a key characteristic of agentless scanning for cloud workloads?

   • AIt does not require installing software on the scanned workloads
   • BIt provides real-time continuous monitoring of runtime processes
   • CIt requires a VPN connection to each workload
   • DIt only works for containerized workloads
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A development team uses AWS ECR to store container images for their microservices. The security team wants to ensure that images are scanned for vulnerabilities before they are deployed to production. They want to integrate scanning into their CI/CD pipeline. What is the most effective way to achieve this?

   • AUse agentless scanning on the ECR repository to check for vulnerabilities.
   • BRely on AWS Inspector to scan images and assume it is integrated with Prisma Cloud.
   • CConfigure Prisma Cloud to scan images in ECR and use the results to block deployment if critical vulnerabilities are found.
   • DManually scan images in ECR before each deployment using the AWS Console.
   Reveal Solution Discussion Select an answer first