Cloud Security Professional Practice Questions & Answers • ExamPrepare

71 questions in this view

Page 1 of 12

Question 1

Which action should be taken to investigate multiple log sources when researching a known threat by using threat intelligence?

Review the sequence of events in the timeline.
Identify characteristics used to create a behavioral indicator of compromise (BIOC) or correlation rule.
Build an XQL query using the Query Builder.
Select an event of interest and open the Causality View.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A customer has rapidly and carelessly deployed large-scale AI models in their workflows. The customer has no administrative body in place to determine which models are acceptable use and what data is ingested by the models.

How can AI Security Posture Management (AI–SPM) assist in this environment?

By identifying sensitive and publicly exposed data
By creating policies to prevent new database deployment
By identifying malware in the databases and explaining data residency
By creating policies to prevent new AI model deployment

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A payload is successfully sent in an HTTP request due to a vulnerable library detected using the application security capabilities of Cortex Cloud.

Which action will remediate the issue?

Upgrade the vulnerable package to a secure build.
Roll back the package to a less vulnerable version.
Patch the server on which the application is running.
Close port 443 to prevent external access to the application.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

A development team is using Cortex Cloud for a centralized view to monitor and analyze application security posture.

Which two components of Cortex Cloud will enable secure software development in this scenario? (Choose two.)

Under Dashboard & Reports, select Dashboard → API Security in the page dropdown menu.
Under Modules, select Application Security → AppSec Dashboard from the menu.
Under Inventory, select All Assets → Code → CI/CD Pipelines from the menu.
Under Dashboard & Reports, select Dashboard → Application Security in the page dropdown menu.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Which operational status will identify all endpoints with agents that are not functioning properly due to insufficient resources?

Unprotected
Local Resource Impact
Not Protected
Limited Protection

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

A security team is reviewing risks associated with its automated software delivery process. Team members are specifically concerned about an attacker manipulating the CI configuration file to execute unauthorized commands during the build process.

How does Cortex Cloud detect this risk?

By alerting on which CI/CD pipeline is misconfigured and vulnerable to a poisoned pipeline execution (PPE)
By monitoring the local network traffic of the build server for nonstandard protocols during the compilation phase
By enforcing a mandatory approval step for the lines of code changed in the configuration file
By deploying a runtime sandbox to execute and analyze all pipeline scripts before they run in the production environment

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.