4.5 Explain the Features and Functionality of Cortex Cloud CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which statement best describes the core value proposition of Cortex Cloud?

   • AIt is designed primarily for small businesses with limited cloud usage
   • BIt provides a separate tool for each cloud security function to maximize flexibility
   • CIt simplifies cloud security by consolidating multiple security functions into a single, integrated platform
   • DIt focuses exclusively on network security, ignoring other aspects like compliance and identity
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which statement best describes the integration between Cortex Cloud and Prisma Cloud?

   • AThey share data and alerts to enhance overall cloud security
   • BCortex Cloud is used only for network security
   • CPrisma Cloud is used only for on-premises security
   • DThey operate independently and do not share information
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A healthcare organization uses AWS, Azure, and Google Cloud to host workloads containing PHI. The compliance team needs continuous visibility into misconfigurations across all three providers, and the security team wants to automatically flag over-privileged service accounts. Which Cortex Cloud capability should they enable to address both requirements?

   • ACWPP with agentless scanning
   • BPrisma Cloud Compute standalone
   • CXSIAM with automated playbooks
   • DCSPM with integrated CIEM
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company uses Cortex Cloud and wants to ensure that all AWS S3 buckets are private by default. They also want to be alerted immediately if any bucket becomes public. Which Cortex Cloud feature should they configure?

   • AXSIAM playbook that manually checks bucket policies
   • BCWPP runtime protection for S3 buckets
   • CCIEM policy that reviews S3 bucket permissions
   • DCSPM policy that monitors S3 bucket configurations and triggers real-time alerts
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company runs containerized microservices in Amazon EKS and serverless functions in AWS Lambda. The security team wants threat detection for these workloads but cannot install agents on the Lambda functions and wants to minimize operational overhead on the EKS cluster. Which Cortex Cloud approach should they use?

   • ACSPM-only monitoring for all workloads
   • BAgent-based protection on EKS and agentless on Lambda
   • CCIEM-based entitlement review for Lambda only
   • DAgentless workload scanning for both EKS and Lambda
   Reveal Solution Discussion Select an answer first