4.4 Identify and Describe the Functions of a Cloud Native Application Protection Platform (CNAPP) CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which capability is part of the core functions of a CNAPP?

   • ACompliance monitoring
   • BIdentity and access management for corporate users
   • CPatch management for operating systems on user endpoints
   • DWeb application firewall for on-premises web servers
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security analyst is investigating a potential breach in a Kubernetes cluster. The CNAPP has flagged a container that is making unusual outbound network connections to an unknown IP address. Which CNAPP function provided this alert?

   • ACloud security posture management
   • BRuntime threat detection
   • CCompliance monitoring
   • DImage scanning
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A development team uses Terraform to provision cloud infrastructure. The security team wants to enforce security policies before any infrastructure is deployed. How can a CNAPP be integrated to achieve this?

   • ABy monitoring the running infrastructure after it has been deployed
   • BBy manually reviewing all Terraform files before they are applied
   • CBy requiring all developers to use a specific IDE plugin
   • DBy scanning Terraform configuration files in the CI/CD pipeline before deployment
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which statement best defines a Cloud Native Application Protection Platform (CNAPP)?

   • AA compliance reporting tool that generates audit reports for regulatory standards.
   • BA firewall specifically designed to protect virtual machines in a public cloud.
   • CA security solution that integrates multiple cloud security capabilities to protect cloud-native applications across their lifecycle.
   • DA tool that only scans container images for vulnerabilities before deployment.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses a CNAPP to secure its Kubernetes clusters. The security team wants to ensure that all container images are free of known critical vulnerabilities before they are deployed. They also want to detect any runtime behavior that deviates from the expected baseline. Which two CNAPP functions are most relevant to these requirements?

   • AImage scanning and runtime threat detection
   • BCompliance monitoring and network segmentation
   • CData loss prevention and encryption management
   • DPosture management and identity management
   Reveal Solution Discussion Select an answer first