2.1 Explain the Function of Key Components of Cortex Cloud CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A managed security service provider (MSSP) monitors multiple customer environments using Cortex Cloud. A customer reports a suspected breach and asks the MSSP to perform a deep investigation of network traffic over the past 30 days. The MSSP needs to search across all firewall and endpoint logs for indicators of compromise. What is the primary Cortex Cloud use case the MSSP is performing?

   • AThreat hunting, using log management and rules to proactively search for indicators of compromise
   • BIncident response, which focuses on containing and eradicating an already-confirmed threat
   • CCompliance management, which ensures the customer meets regulatory requirements
   • DAsset inventory, which tracks the customer's cloud resources
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How does Cortex Cloud maintain an asset inventory?

   • ABy manually entering all resources into a spreadsheet
   • BBy discovering and tracking cloud resources
   • CBy storing configuration files for each resource
   • DBy monitoring network traffic to identify assets
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a key feature of compliance reporting in Cortex Cloud?

   • AStoring compliance certificates in a secure vault
   • BGenerating reports that show compliance status against frameworks
   • CAutomatically applying security patches to all resources
   • DProviding real-time chat support for compliance questions
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security team is investigating a potential account takeover. The attacker has compromised a user account and is using it to access sensitive resources. The team wants to identify all resources the compromised user has accessed and determine if the attacker has escalated privileges. What should the team do in Cortex Cloud?

   • AUse the compliance reports to see if the account is compliant with policy
   • BUse the asset inventory to see which resources are managed
   • CUse the users indicator type to track the compromised user's activity and the roles indicator type to check for privilege escalation
   • DUse the IP address indicator type to block the attacker's IP address
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of data masking in Cortex Cloud?

   • ATo encrypt data using a public key
   • BTo hide sensitive data from unauthorized users
   • CTo delete data that is no longer needed
   • DTo compress data to save storage space
   Reveal Solution Discussion Select an answer first