2.3 Explain the Process of Onboarding Application Development and Deployment Systems (e.g., GitHub, Jenkins) CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a Jenkins pipeline, where do you typically configure the Prisma Cloud scan step?

   • AIn the Jenkins global configuration
   • BIn the Jenkins user profile settings
   • CIn the Jenkins plugin manager
   • DIn the Jenkinsfile or pipeline script
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security engineer has connected a GitHub repository to Prisma Cloud, but the initial scan completes without finding any issues even though the repository contains a Terraform file with a known misconfiguration. What is the most likely cause of this false negative?

   • AThe Terraform file uses a provider version that Prisma Cloud does not support.
   • BThe scan only checks the default branch, and the misconfiguration exists only in a feature branch.
   • CThe repository was connected with read-only permissions, so Prisma Cloud cannot access the file contents.
   • DThe Terraform file is in a subdirectory that is excluded by the repository's path filter.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of onboarding a development system such as GitHub or Jenkins into Prisma Cloud?

   • ATo migrate all source code from GitHub and Jenkins into Prisma Cloud's storage
   • BTo enable Prisma Cloud to scan code repositories and CI/CD pipelines for security issues and enforce policies
   • CTo replace the organization's existing CI/CD pipeline with Prisma Cloud's built-in pipeline
   • DTo provide developers with a new interface for writing and committing code
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In a Jenkins pipeline, how do you configure the Prisma Cloud scan to run on specific branches?

   • ABy creating a separate Jenkins job for each branch
   • BBy editing the Prisma Cloud console settings
   • CBy setting branch filters in the Jenkins job configuration
   • DBy using a GitHub webhook to filter branches
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When a Jenkins integration with Prisma Cloud fails to authenticate, what should you check first?

   • AThe Jenkins server has internet access
   • BThe Jenkins plugin is up to date
   • CThe Prisma Cloud access key and secret key are correctly configured in Jenkins
   • DThe Jenkins job is configured to run on the correct branch
   Reveal Solution Discussion Select an answer first