4.3 Identify and Describe Technologies Used to Secure Cloud Environments (e.g. CSPM, CWPP) CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company runs a containerized application and wants to ensure that containers are isolated from each other to prevent an attacker from moving laterally between them. Which CWPP capability is most relevant?

   • ARuntime protection
   • BWorkload isolation
   • CVulnerability management
   • DCompliance checks
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company discovers that a developer accidentally left a cloud storage bucket publicly readable. They want to prevent this from happening again by gaining visibility into all cloud resources and their configurations. Which technology should they implement?

   • ACSPM
   • BSIEM
   • CCASB
   • DCWPP
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company uses multiple VMs to run a legacy application. They want to ensure that the VMs are patched against known vulnerabilities and that any suspicious process activity is flagged. Which CWPP capability addresses both requirements?

   • AVulnerability management and runtime protection
   • BCompliance checks and reporting
   • CNetwork segmentation
   • DData loss prevention
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security team is implementing a cloud security strategy. They have deployed a CSPM that continuously checks for misconfigurations and a CWPP that provides runtime protection for workloads. Which of the following scenarios would still require a different technology to address?

   • AA container image has a known vulnerability.
   • BA cloud storage bucket is set to public.
   • CA VM is running a malicious process.
   • DA user accidentally shares a sensitive file with an external party via a SaaS application.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company must comply with a regulatory standard that requires regular audits of cloud resource configurations. They want to automate the process of checking configurations against the standard and generating reports. Which CSPM capability is most relevant?

   • ACompliance checks and reporting
   • BIdentity management
   • CWorkload isolation
   • DRuntime protection
   Reveal Solution Discussion Select an answer first