Question 1

The security team wants to target a CNAF policy for specific running Containers. How should theadministrator scope the policy to target the Containers?

Options :

A : scope the policy to Image names.

B : scope the policy to namespaces.

C : scope the policy to Defender names.

D : scope the policy to Host names.

Answer: A

Question 2

A customer is reviewing Container audits, and an audit has identified a cryptominer attack. Which threeoptions could have generated this audit? (Choose three.)

Options :

A : The value of the mined currency exceeds $100.

B : High CPU usage over time for the container is detected.

C : Common cryptominer process name was found.

D : The mined currency is associated with a user token.

E : Common cryptominer port usage was found.

Answer: B,C,E

Question 3

Which action would be applicable after enabling anomalous compute provisioning?

Options :

A : It detects the activity caused by the spambot.

B : It detects unusual server port activity or unusual protocol activity from a client within or outside thecloud environment.

C : It detects potential creation of an unauthorized network of compute instances with AutoFocus.

D : It detects potential creation of an unauthorized network of compute instances either accidentally or forcryptojacking.

Answer: D

Question 4

An organization wants to be notified immediately to any “High Severity” alerts for the account group“Clinical Trials” via Slack.Which option shows the steps the organization can use to achieve this goal?

Options :

A : 1. Configure Slack Integration2.Create an alert rule and select “Clinical Trials” as the account group3.Under the “Select Policies” tab, filter on severity and select “High”4.Under the Set Alert Notificationtab, choose Slack and populate the channel5.Set Frequency to “As it Happens”

B : 1. Create an alert rule and select “Clinical Trials” as the account group2.Under the “Select Policies” tab,filter on severity and select “High”3.Under the Set Alert Notification tab, choose Slack and populate thechannel4.Set Frequency to “As it Happens”5.Set up the Slack Integration to complete the configuration

C : 1. Configure Slack Integration2.Create an alert rule3.Under the “Select Policies” tab, filter on severityand select “High”4.Under the Set Alert Notification tab, choose Slack and populate the channel5.SetFrequency to “As it Happens”

D : 1. Under the “Select Policies” tab, filter on severity and select “High”2.Under the Set Alert Notificationtab, choose Slack and populate the channel3.Set Frequency to “As it Happens”4.Configure SlackIntegration5.Create an Alert rule

Answer: A

Question 5

While writing a custom RQL with array objects in the investigate page, which type of auto-suggestion a user can leverage?

Options :

A : Auto-sugestion for array objects that are useful for comparing between arrays

B : Auto-suggestion is not available for array objects

C : Auto-suggestion for array objects that are useful for categorization of resource parameters

D : Auto-suggestion for array objects that are useful for comparing between array elements

Answer: B

Free CloudSec-Pro Mock Exam – Practice Online Confidently

Buying Options: