4.4 Identify and Describe the Functions of a Cloud Native Application Protection Platform (CNAPP) CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary role of a Cloud Native Application Protection Platform (CNAPP) in an organization?

   • ATo replace the need for any other security controls in the cloud environment.
   • BTo enforce network segmentation rules between cloud workloads.
   • CTo manage the underlying cloud infrastructure and ensure high availability.
   • DTo provide a single, integrated security solution for cloud-native applications from development to runtime.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does a CNAPP differ from a traditional firewall in a cloud-native environment?

   • AA CNAPP is deployed on-premises, while a firewall is cloud-based.
   • BA CNAPP provides security across the application lifecycle, while a firewall focuses on network traffic filtering.
   • CA firewall provides compliance monitoring, while a CNAPP does not.
   • DA CNAPP only protects containers, while a firewall protects all workloads.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security team is configuring a CNAPP for a multi-cloud environment. They want to prioritize alerts based on risk. The CNAPP has identified a critical vulnerability in a container image that is running in production, and a high-severity misconfiguration in a development storage bucket. The team has limited resources and can only address one issue immediately. Which issue should they prioritize?

   • ABoth issues simultaneously, as they are both critical
   • BNeither issue, as the CNAPP will automatically remediate them
   • CThe high-severity misconfiguration in the development storage bucket
   • DThe critical vulnerability in the production container image
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company currently uses a traditional vulnerability management tool that scans virtual machines on a weekly schedule. They are moving to a containerized architecture on Kubernetes where new workloads are created and destroyed frequently. What is a key limitation of the traditional tool in this new environment that a CNAPP would address?

   • AIt cannot be integrated with any other security tools
   • BIt cannot identify the operating system of the scanned workloads
   • CIt cannot be used in a cloud environment
   • DIt cannot scan containers that are ephemeral and only exist for a short time
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does a CNAPP typically integrate with DevOps pipelines to provide continuous security?

   • ABy requiring manual security reviews after each deployment.
   • BBy embedding security checks into CI/CD workflows to scan code and images before deployment.
   • CBy replacing the CI/CD pipeline with a security-only pipeline.
   • DBy providing a separate security environment that runs in parallel to the production environment.
   Reveal Solution Discussion Select an answer first