2.3 Explain the Process of Onboarding Application Development and Deployment Systems (e.g., GitHub, Jenkins) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What does Prisma Cloud do when it scans code during the onboarding process?

   • AIt compiles the code and runs unit tests
   • BIt deploys the code to a staging environment
   • CIt rewrites the code to fix security issues
   • DIt analyzes the code for security vulnerabilities and policy violations
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company has a monorepo in GitHub containing both infrastructure-as-code (IaC) templates and application source code. The security team wants Prisma Cloud to scan only the IaC templates in the 'infra/' directory and ignore the application code. What should be configured in the Prisma Cloud repository scan settings?

   • AScan the entire repository and rely on the policy engine to ignore non-IaC files.
   • BCreate a separate repository containing only the IaC templates and scan that repository.
   • CSet the repository scan to include only the 'infra/' path using a path filter.
   • DUse a Jenkins job to copy the 'infra/' directory to a new branch and scan that branch.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the first step to connect a GitHub repository to Prisma Cloud for scanning?

   • AClone the repository into Prisma Cloud's local storage
   • BConfigure a webhook to send all commits to Prisma Cloud
   • CCreate a GitHub personal access token with the required permissions
   • DInstall a Prisma Cloud agent on the GitHub server
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A team uses Jenkins to build a Java application and wants Prisma Cloud to scan the source code for vulnerabilities before packaging. The pipeline currently has a 'Build' stage and a 'Package' stage. Where should the Prisma Cloud scan step be inserted?

   • AAfter the Package stage, before deployment.
   • BIn a separate Jenkins job that runs after deployment.
   • CBetween the Build and Package stages.
   • DBefore the Build stage.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   When configuring Jenkins integration with Prisma Cloud, what is typically required to authenticate?

   • AA Prisma Cloud access key and secret key
   • BA GitHub personal access token
   • CA Jenkins API token
   • DA Jenkins username and password
   Reveal Solution Discussion Select an answer first