5.5 Explain the Cloud Native Security Platform (CNSP) CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does a cloud native security platform (CNSP) typically integrate with a container orchestration platform like Kubernetes?

   • ABy only providing security for virtual machines, not containers
   • BBy requiring all containers to be manually inspected before deployment
   • CBy replacing Kubernetes with its own orchestration engine
   • DBy using Kubernetes APIs to discover workloads and apply security policies
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best describes a deployment difference between a cloud native security platform (CNSP) and traditional security solutions?

   • AA CNSP is deployed exclusively on-premises, whereas traditional security is deployed in the cloud
   • BA CNSP requires physical installation in each data center, whereas traditional security is always cloud-based
   • CA CNSP is deployed only after the application is fully developed, whereas traditional security is integrated during development
   • DA CNSP is typically deployed as a software-as-a-service (SaaS) or integrated with cloud-native APIs, whereas traditional security often requires dedicated hardware or virtual appliances
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization currently uses a traditional security model with network firewalls and manual compliance checks. They are moving to a DevOps model where developers deploy code multiple times a day using containers. The security team wants to integrate security into the CI/CD pipeline and gain visibility into cloud-native workloads. What is a key architectural difference that a CNSP offers compared to the traditional approach?

   • ASecurity is enforced only at the network perimeter.
   • BSecurity policies are static and require manual updates for each change.
   • CSecurity controls are automated and integrated into the development lifecycle.
   • DSecurity monitoring is performed by a separate team using standalone tools.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company uses AWS Lambda functions and also runs containers on Amazon ECS. They want to ensure that security policies are consistently applied across both serverless and container workloads. Which CNSP feature is most important for achieving this?

   • AA separate security tool for each cloud service.
   • BManual configuration of security groups for each function and container.
   • CA physical firewall appliance deployed in the cloud VPC.
   • DIntegration with cloud provider APIs to discover and protect all workload types.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization is moving from a data center with physical firewalls and on-premises IDS/IPS to a cloud environment where applications are built using containers and serverless functions. The security team wants a solution that can scale with dynamic workloads and provide visibility across the entire application lifecycle. Which characteristic is most important when evaluating a cloud native security platform?

   • AIt can be deployed as a physical appliance in the organization's data center.
   • BIt relies on network segmentation and traditional firewall rules for all security controls.
   • CIt requires manual configuration of security policies for each new workload.
   • DIt uses API-driven integration with cloud providers and container orchestration platforms.
   Reveal Solution Discussion Select an answer first