4.4 Identify and Describe the Functions of a Cloud Native Application Protection Platform (CNAPP) CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a core function of a Cloud Native Application Protection Platform (CNAPP)?

   • AWorkload protection
   • BNetwork intrusion detection for legacy data centers
   • CEndpoint detection and response for user laptops
   • DData loss prevention for on-premises file servers
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security team is evaluating a CNAPP for their organization, which uses a mix of AWS, Azure, and Google Cloud. They want to ensure that security policies are consistently applied across all three clouds and that any misconfigurations are detected in near real-time. What is the most important integration capability the CNAPP must have?

   • ANative API integrations with all three cloud providers
   • BAn agent installed on every virtual machine in each cloud
   • CA software-defined network overlay that spans all three clouds
   • DA virtual private network (VPN) connection to each cloud environment
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A startup is building a new application using a serverless architecture on AWS Lambda and Amazon API Gateway. They have no existing security infrastructure and want a solution that can provide visibility into their cloud configuration, protect their serverless functions, and integrate with their CI/CD pipeline. What type of tool is best suited for this scenario?

   • AA Cloud Native Application Protection Platform (CNAPP)
   • BAn on-premises intrusion prevention system (IPS)
   • CA host-based endpoint protection platform
   • DA traditional network firewall
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a key advantage of a CNAPP over traditional security tools in cloud-native architectures?

   • AIt is designed to protect on-premises data centers more effectively.
   • BIt provides a unified view of security across the entire application lifecycle.
   • CIt eliminates the need for any security monitoring.
   • DIt is a single tool that replaces all other security products.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is adopting a 'shift-left' security approach and wants to integrate a CNAPP into its CI/CD pipeline. The pipeline currently builds container images, scans them for vulnerabilities using a separate tool, and then deploys them to a Kubernetes cluster. The security team wants to reduce the number of tools and have a single solution. What is the most effective way to use the CNAPP in this pipeline?

   • ADeploy the CNAPP as a sidecar container in each pod to scan images at runtime
   • BUse the CNAPP to scan the IaC templates but keep the separate image scanner
   • CReplace the separate image scanner with the CNAPP's image scanning and add IaC scanning to the pipeline
   • DKeep the separate image scanner and use the CNAPP only for runtime monitoring in the cluster
   Reveal Solution Discussion Select an answer first