4.5 Explain the Features and Functionality of Cortex Cloud CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A government contractor must comply with FedRAMP and needs to demonstrate continuous compliance for its Azure environment. The compliance team wants to automate evidence collection and generate reports for auditors, while the security team wants to ensure that any new Azure resource is automatically assessed against FedRAMP controls before it goes live. What should they configure in Cortex Cloud?

   • ACSPM with FedRAMP framework, continuous monitoring, and automated evidence collection
   • BCWPP with runtime threat detection on Azure VMs
   • CXSIAM with manual audit report generation
   • DCIEM with identity analytics for all Azure service principals
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the role of Cortex Cloud in threat detection and response?

   • ATo store backup data for cloud resources
   • BTo provide a ticketing system for IT support
   • CTo manage on-premises firewall rules only
   • DTo detect threats across cloud environments and facilitate response actions
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company must comply with GDPR and needs to ensure that personal data stored in cloud resources is protected. They also want to detect when a storage bucket containing personal data is publicly accessible. What should they configure in Cortex Cloud?

   • ACWPP with runtime threat detection
   • BXSIAM with manual data access reviews
   • CCSPM with GDPR compliance framework and data classification policies
   • DCIEM with identity analytics for data access
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company has a critical application running on a VM in AWS that cannot tolerate any downtime. The security team wants to enable Cortex Cloud threat detection for this workload but is concerned that agent-based deployment might impact performance. They also need to detect runtime threats, not just configuration issues. What should they do?

   • AMigrate the VM to a container to enable agentless runtime detection
   • BInstall an agent on the VM despite the downtime risk
   • CUse agentless scanning for the VM, accepting that runtime threat detection may be limited compared to agent-based
   • DUse CSPM only for the VM
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company runs a serverless application on AWS Lambda. The security team wants to detect vulnerabilities in the function's dependencies and monitor for runtime threats, but they cannot install an agent inside the Lambda execution environment. What should they use in Cortex Cloud?

   • AAgentless CWPP scanning for Lambda functions
   • BCIEM-based permission review for Lambda
   • CAgent-based CWPP on the Lambda function
   • DCSPM-only monitoring for Lambda
   Reveal Solution Discussion Select an answer first