3.1 Identify and Explain the Use of Key Cloud Posture Security Elements CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has a mix of Windows and Linux VMs in Azure and AWS. The security team wants to continuously identify missing patches and known vulnerabilities, prioritize them based on exploitability and asset criticality, and track remediation progress. They prefer not to install agents on every VM. Which solution best fits this requirement?

   • AA manual monthly review of each VM's installed patches using a spreadsheet
   • BA vulnerability management platform that uses agentless scanning to assess VMs and provides risk-based prioritization
   • CA CSPM tool that checks for open security groups and storage bucket policies
   • DA KSPM solution that scans Kubernetes clusters for pod security issues
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company runs a Kubernetes cluster in AKS. The security team wants to enforce that no pod runs as root and that RBAC roles are least-privilege. They also want to detect when a service account is used to access the Kubernetes API from an unexpected location. They want to avoid installing agents on nodes. What is the best approach?

   • AInstall an agent on each node to monitor pod activity and RBAC usage
   • BUse a CSPM tool that checks for public storage accounts and open security groups
   • CUse Azure Policy to enforce pod security and RBAC, and Azure AD logs for anomaly detection
   • DUse a KSPM tool that scans the cluster API for pod security contexts and RBAC, and integrates with Azure AD for anomaly detection
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What does identity security in the cloud primarily involve?

   • AScanning for vulnerabilities in applications
   • BConfiguring network firewalls
   • CManaging and securing user and service identities, including IAM and least privilege
   • DEncrypting all data at rest
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is agentless scanning in cloud security?

   • AA method that only scans virtual machines, not containers
   • BA method of assessing cloud workloads without installing software agents on each asset
   • CA process that requires manual assessment by security analysts
   • DA technique that relies on network traffic analysis only
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an example of a Kubernetes-specific security concern that KSPM would help identify?

   • AAn employee's password being reused across multiple accounts
   • BA pod running with privileged access when it should not
   • CA virtual machine with an open SSH port
   • DAn S3 bucket with public read access
   Reveal Solution Discussion Select an answer first