5.5 Explain the Cloud Native Security Platform (CNSP) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which scenario best illustrates the role of a cloud native security platform (CNSP)?

   • AAn organization deploys a containerized application to a Kubernetes cluster and uses a CNSP to monitor for vulnerabilities and runtime threats across the cluster
   • BAn organization uses a spreadsheet to manually track its IT assets and their compliance status
   • CAn organization installs a firewall at the perimeter of its on-premises data center to protect its internal network
   • DAn organization hires a third-party firm to conduct an annual penetration test of its web application
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of a cloud native security platform (CNSP)?

   • ATo secure only the underlying physical infrastructure of a cloud data center
   • BTo secure applications that are built and deployed using cloud-native technologies such as containers, microservices, and serverless functions
   • CTo replace the need for any other security tools by providing a single, all-encompassing solution for every security need
   • DTo manage user identities and access permissions for cloud resources
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company runs a critical application on Amazon EKS and also uses AWS Lambda for some functions. They have a security team that is familiar with traditional network security but not with cloud-native concepts. They need to implement a security solution that provides consistent protection across both container and serverless workloads, and they want to minimize the learning curve for their team. Which approach best meets these requirements?

   • AImplement a traditional network firewall in the VPC to inspect all traffic.
   • BDeploy a CNSP that provides a unified dashboard and uses policy templates for common security controls.
   • CConfigure AWS security groups and IAM policies to protect all workloads.
   • DUse separate security tools for EKS and Lambda, each managed by different teams.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard · select all that apply

   A company is transitioning from a traditional security model to a cloud-native approach. They want to adopt a CNSP but are unsure how it differs from their current tools. Which statements accurately describe a difference between a CNSP and traditional security approaches? Select all that apply.

   • AA CNSP requires physical appliances to be deployed in each cloud region.
   • BA CNSP typically integrates with cloud provider APIs and container orchestration platforms.
   • CA CNSP is designed for dynamic, ephemeral workloads, while traditional security often assumes static infrastructure.
   • DA CNSP provides automated security controls that can be integrated into CI/CD pipelines.
   • EA CNSP focuses on network perimeter controls, similar to traditional firewalls.
   Check answers Discussion Select an answer first
6. 5application · medium

   A company has been using a traditional security operations center (SOC) with on-premises tools. They are moving to a cloud-native architecture and want to adopt a CNSP. What is a significant advantage of a CNSP over the traditional SOC approach?

   • AIt provides visibility and control across dynamic, ephemeral workloads.
   • BIt requires the same hardware and software as on-premises tools.
   • CIt is less scalable than traditional security tools.
   • DIt focuses only on network traffic and ignores application-level threats.
   Reveal Solution Discussion Select an answer first