4.1 Explain Cloud Runtime Security Concepts and Capabilities CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company runs a public-facing web application that uses a REST API. The security team has noticed a high volume of requests from a small set of IP addresses that are attempting to exploit SQL injection vulnerabilities. They also want to block automated bots that are scraping content. The application is deployed on Kubernetes and traffic enters through a load balancer. Which solution should they implement?

   • AEnable Kubernetes Network Policies to restrict traffic to the application pods.
   • BUse a web application firewall that only inspects HTTP headers and not the request body.
   • CDeploy WAAS inline in front of the application to inspect traffic and block SQL injection and bot traffic.
   • DConfigure the load balancer to drop traffic from the identified IP addresses.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of Cloud Workload Protection (CWP) in a cloud environment?

   • ATo replace the cloud provider's physical security controls with a virtual firewall
   • BTo provide a single dashboard for billing and cost optimization of cloud resources
   • CTo manage user identities and access permissions across cloud accounts
   • DTo secure workloads by providing discovery, hardening, and continuous monitoring across cloud environments
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   When is an agentless CWP deployment model most appropriate?

   • AWhen you want to enforce host-based firewall rules on each workload
   • BWhen you need real-time, in-memory threat detection on every VM
   • CWhen you require the lowest possible latency for network traffic inspection
   • DWhen protecting workloads where installing an agent is not feasible, such as serverless functions or managed services
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security team is overwhelmed by the number of vulnerabilities reported by their scanning tools. They need to prioritize remediation efforts across a large fleet of cloud workloads. They have identified a critical vulnerability in a container image that is used by several workloads, including a production application and a development environment. The production application is internet-facing, while the development environment is not. The vulnerability has a known exploit. Which approach should the team take to prioritize remediation?

   • APrioritize the production workload first, because it is internet-facing and the vulnerability has a known exploit.
   • BIgnore the vulnerability in the development environment, because it is not internet-facing.
   • CRemediate all workloads at the same time, because they all use the same vulnerable image.
   • DPrioritize the development environment first, because it is easier to remediate and test.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How is vulnerability severity typically expressed in cloud security tools?

   • AUsing the cloud provider's region where the asset is hosted
   • BUsing the number of days since the vulnerability was discovered
   • CUsing the size of the affected codebase
   • DUsing a standardized scoring system such as CVSS
   Reveal Solution Discussion Select an answer first