4.1 Explain Cloud Runtime Security Concepts and Capabilities CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   What is the correct sequence of the Cloud Detection and Response (CDR) lifecycle?

   • AInvestigation, threat detection, and automated response
   • BThreat detection, automated response, and investigation
   • CThreat detection, investigation, and automated response
   • DAutomated response, threat detection, and investigation
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security operations team is investigating a potential compromise of a cloud workload. They have identified suspicious API calls made by an IAM role that is used by an EC2 instance. The team wants to understand the full scope of the incident, including what the role accessed and whether the instance was used to move laterally. Which CDR capability is most directly suited to this investigation?

   • AChecking the instance's system logs for authentication failures to determine if the instance was compromised.
   • BReviewing the instance's security group rules to identify open ports that could have been exploited.
   • CCorrelating cloud audit logs with workload activity to trace the role's actions and the instance's behavior.
   • DRunning a vulnerability scan on the instance to identify missing patches that may have been exploited.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company has a public-facing API that is used by mobile applications. The API has been targeted by credential stuffing attacks, where attackers use lists of usernames and passwords to gain unauthorized access. The security team wants to block these attacks without affecting legitimate users. Which WAAS capability should they enable?

   • ARate limiting that restricts the number of requests from a single IP address.
   • BBot mitigation that can detect and block automated credential stuffing attempts.
   • CSQL injection protection to prevent attackers from manipulating database queries.
   • DAPI schema validation to ensure that requests conform to the expected format.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which capability is a core function of Cloud Workload Protection (CWP)?

   • AContinuous monitoring of workloads for threats and vulnerabilities
   • BOptimization of cloud storage costs by compressing data
   • CAutomated creation of new cloud accounts for development teams
   • DManagement of on-premises network switches and routers
   Reveal Solution Discussion Select an answer first