3.6 Identify and Describe Methods for Managing Custom and Out-Of-The-Box Compliance Standards / Controls, Assessments, and Reporting CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   Your team wants to receive a weekly compliance summary for the 'CIS Microsoft Azure Foundations Benchmark' every Monday at 9:00 AM. The summary should include the overall compliance score and a breakdown by control. What should you configure to automate this delivery?

   • ACreate a scheduled compliance report with a weekly recurrence and configure email recipients.
   • BConfigure an alert rule that triggers when the compliance score drops below a threshold.
   • CCreate a custom standard and schedule a report for it, even though the CIS benchmark is built-in.
   • DRun a compliance assessment every Monday and manually send the results to the team.
   Reveal Solution Discussion Select an answer first
2. 7application · easy

   Your custom compliance standard has a control that is no longer relevant because the underlying technology has been decommissioned. You want to ensure that future assessments do not evaluate this obsolete control. What should you do?

   • ACreate a new standard without the control and use that for future assessments.
   • BRemove the obsolete control from the custom compliance standard.
   • CDisable the control by changing its severity to 'Low'.
   • DLeave the control in place and ignore its results in the report.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of a custom compliance standard in a cloud security posture management platform?

   • ATo automatically generate compliance reports without manual configuration.
   • BTo replace the need for any out-of-the-box compliance standards.
   • CTo allow an organization to define its own set of controls and requirements for compliance assessment.
   • DTo enforce security policies across all cloud accounts in real time.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An assessment against a custom standard shows that a specific storage account is non-compliant for a control requiring 'Secure transfer required' to be enabled. You need to determine the exact reason for this failure before making changes. What should you do?

   • ACheck the storage account's diagnostic settings to see if logging is enabled.
   • BRe-run the assessment and hope the result changes.
   • CLook at the overall compliance score for the standard.
   • DView the assessment result details for that storage account and control.
   Reveal Solution Discussion Select an answer first
6. 10application · easy

   A security analyst needs to quickly assess the environment against widely recognized industry best practices without spending time configuring individual controls. They want a report that shows compliance status against a predefined baseline. What should you instruct them to do?

   • AGenerate a report from the 'Compliance' blade without selecting a standard.
   • BRun an assessment using a custom standard that only contains controls for your specific industry.
   • CCreate a custom standard and manually add all controls from the benchmark.
   • DRun a compliance assessment using the built-in 'Azure Security Benchmark' standard.
   Reveal Solution Discussion Select an answer first