4.2 Explain the Process of Agent Management and Deployment CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does auto-scaling of cloud workloads affect agent deployment?

   • AAuto-scaling automatically installs agents without any configuration
   • BAgents are not needed on auto-scaled instances because they are temporary
   • CAgents should be manually installed on each new instance after scaling
   • DAgents must be automatically deployed to new instances as they are created
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   Your organization runs a large Kubernetes cluster on EKS with 200 nodes. The Prisma Cloud Defender is deployed as a DaemonSet. You need to upgrade the Defender version across the cluster with minimal disruption to running workloads. What is the recommended approach?

   • AManually SSH into each node and run the Defender upgrade script.
   • BUpdate the DaemonSet's image tag and use a rolling update strategy with a maxUnavailable value of 1.
   • CUse kubectl scale to reduce the DaemonSet to 0, then scale it back up with the new image.
   • DDelete the existing DaemonSet and create a new one with the updated image, allowing the cluster to reschedule the pods.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When planning agent deployment across multiple cloud accounts, which step is typically performed first?

   • AInstall the agent on a test workload to verify functionality
   • BConfigure the management plane to accept new agents
   • CCreate a custom agent installation script for each cloud provider
   • DIdentify the workloads and cloud accounts where agents are required
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which installation method allows an administrator to deploy an agent to a single cloud VM without using external automation tools?

   • AManual installation using a command-line interface or package manager
   • BUsing a golden image that already contains the agent
   • CIntegration with a cloud-native configuration management service
   • DDeploying a container with the agent sidecar
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   You are managing a fleet of 500 Defenders on VMs. You need to upgrade them to a new version. The upgrade requires a reboot of the VM. Your security policy mandates that no VM should be without a Defender for more than 5 minutes. What is the best strategy to upgrade the Defenders?

   • AUpgrade the Defenders one by one, waiting for each to fully reboot and reconnect before moving to the next.
   • BUse a rolling upgrade strategy with a tool like Ansible, but do not monitor the health of the Defenders after the upgrade.
   • CUpgrade all Defenders at once using the Console's 'Upgrade All' feature, and accept the brief downtime.
   • DUpgrade the Defenders in batches, starting with the least critical VMs, and monitor the health of each batch before proceeding.
   Reveal Solution Discussion Select an answer first