4.3 Identify and Describe Technologies Used to Secure Cloud Environments (e.g. CSPM, CWPP) CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary difference between CSPM and CWPP?

   • ACSPM is used for on-premises environments, while CWPP is used only for cloud environments
   • BCSPM is a cloud-native tool, while CWPP is a third-party tool
   • CCSPM focuses on the configuration of cloud infrastructure, while CWPP focuses on securing the workloads running on it
   • DCSPM provides runtime protection, while CWPP provides compliance monitoring
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How do CSPM and CWPP complement each other in a cloud security strategy?

   • ACSPM provides runtime protection, while CWPP provides compliance monitoring
   • BCSPM secures the cloud configuration, while CWPP secures the workloads running in the cloud
   • CCSPM manages user identities, while CWPP manages network security
   • DCSPM is used for public cloud, while CWPP is used for private cloud
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a core capability of a Cloud Workload Protection Platform (CWPP)?

   • AProviding single sign-on for cloud applications
   • BAutomated remediation of misconfigured resources
   • CContinuous monitoring of cloud configuration
   • DVulnerability management for workloads
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization uses several SaaS applications, including a file-sharing service and a CRM. The security team wants to enforce data-loss-prevention policies on files uploaded to these services and control which devices can access them. Which technology is designed for this?

   • ACSPM
   • BIAM
   • CCWPP
   • DCASB
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a core capability of Cloud Security Posture Management (CSPM)?

   • AIsolating workloads to prevent lateral movement of attackers
   • BContinuous monitoring of cloud infrastructure for misconfigurations
   • CRuntime protection of virtual machines against zero-day exploits
   • DProviding single sign-on for users accessing cloud applications
   Reveal Solution Discussion Select an answer first