Question 1

In a cloud-based environment, where should a virtual next-generation firewall (NGFW) be deployed to provide optimal protection for applications and data?

Options :

A : In the public subnet of the cloud environment, directly exposed to the internet

B : Between the database servers and the application servers within the same subnet

C : At the ingress/egress points of the virtual private cloud (VPC)

D : Only within a single availability zone to minimize deployment complexity

Answer: C

Question 2

Your organization uses a host-based security architecture to secure virtual machines in a multi-cloud environment. You are tasked with designing a security strategy for monitoring and protecting each host. Which of the following is the most critical component of a host-based security solution in this scenario?

Options :

A : Cloud Service Provider’s Shared Responsibility Model

B : Perimeter Firewalls

C : Host-based Intrusion Detection System (HIDS)

D : Virtual Private Network (VPN) Connections

Answer: C

Question 3

When designing a secure serverless function to process sensitive data, which of the following practices should be followed to ensure compliance with data protection standards?

Options :

A : Leverage environment variables to pass sensitive data securely to the serverless function.

B : Enable logging and store logs containing sensitive data in a public S3 bucket for auditing purposes.

C : Allow functions to dynamically fetch sensitive data from unencrypted third-party APIs.

D : Deploy serverless functions without any form of input validation to maximize performance.

Answer: A

Question 4

Your organization uses Prisma Cloud for Cloud Security Posture Management (CSPM). Which capability of Prisma Cloud best enables effective threat detection across your cloud infrastructure?

Options :

A : Scheduled weekly scans of cloud resources to identify threats

B : Continuous monitoring of cloud configurations and comparison against compliance benchmarks

C : Manual vulnerability scanning of container images before deployment

D : Automated response to misconfigurations in runtime environments

Answer: B

Question 5

An organization uses Kubernetes to manage its containerized workloads in a multi-cloud environment. They want to ensure their CNSP solution provides comprehensive workload security. Which feature is most critical for addressing workload security in this context?

Options :

A : Manually reviewing YAML files for misconfigurations

B : Disabling unused ports in the container orchestration layer

C : Automated container image vulnerability scanning before deployment

D : Relying on cloud provider-native security tools for all workloads

Answer: C

Free Cybersecurity-Practitioner Mock Exam – Practice Online Confidently

Buying Options: