4.4 Identify and Describe the Functions of a Cloud Native Application Protection Platform (CNAPP) CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A development team uses a CI/CD pipeline in GitLab to build and deploy a serverless application on AWS Lambda. The security team wants to ensure that infrastructure-as-code templates are checked for misconfigurations before deployment, and that running Lambda functions are monitored for runtime threats. Which CNAPP integration approach best satisfies both requirements?

   • ADeploying a network-based intrusion detection system in the VPC to monitor Lambda function traffic
   • BRunning a vulnerability scanner inside each Lambda function's execution environment during runtime
   • CUsing a traditional endpoint protection platform agent installed on the underlying Lambda infrastructure
   • DIntegrating the CNAPP with the GitLab pipeline to scan IaC templates, and with AWS APIs to monitor deployed Lambda functions
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization needs to demonstrate compliance with PCI DSS for its cloud-hosted application. The security team wants to automate the process of checking cloud configurations against PCI DSS requirements and generate reports for auditors. Which CNAPP function is most directly applicable to this need?

   • ARuntime threat detection
   • BImage scanning
   • CCompliance monitoring and reporting
   • DIdentity and access management
   Reveal Solution Discussion Select an answer first