Online Access Free CloudSec-Pro Exam Questions

When would a policy apply if the policy is set under Defend > Vulnerability > Images > Deployed?

• A.when a serverless repository is scanned
• B.when a Container is started form an Image
• C.when the Image is built
• D.when the Image is built and when a Container is started form an Image

How can a user determine the number of applications affected by a specific vulnerability and whether or not an endpoint agent is installed?

• A.By creating an asset group and a Cloud Security Assessment report
• B.Browsing to the host inventory and viewing the vulnerabilities under Host Insights
• C.By creating an endpoint group and saving it as an agent management report
• D.By viewing the Top Risky Vulnerabilities widget and filtering for the CVE

What is the primary purpose of Prisma Cloud Code Security?

• A.To provide a platform for developers to create custom security policies for applications
• B.To offer instant feedback on application performance issues and bottlenecks
• C.To triage alerts and incidents in realtime during deployment
• D.To address cloud infrastructure misconfigurations in code before they become alerts or incidents

The attempted bytes count displays?

• A.traffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
• B.traffic denied by the security group or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
• C.traffic that is either denied by the security group or firewall rules.
• D.traffic that is either denied by the firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.

Console is running in a Kubernetes cluster, and you need to deploy Defenders on nodes within this cluster. Which option shows the steps to deploy the Defenders in Kubernetes using the default Console service name?

• A.From the deployment page configure the cloud credential in Console and allow cloud discovery to auto-protect the Kubernetes nodes.
• B.From the deployment page in Console, choose twistlock-console for Console identifier, generate DaemonSet file, and apply DaemonSet to the twistlock namespace.
• C.From the deployment page in Console, choose twistlock-console for Console identifier, and run the curl | bash script on the master Kubernetes node.
• D.From the deployment page in Console, choose pod name for Console identifier, generate DaemonSet file, and apply the DaemonSet to twistlock namespace.