CCP CASB & Cloud Security Posture 3

Question 1

What does the CIS Cloud Security Benchmark primarily provide?

Accepted Answer

Prescriptive configuration guidelines for securing cloud environments

Answer

CIS Benchmarks offer prescriptive, consensus-based configuration best practices that CSPM tools use as baseline checks for cloud resource hardening.

Question 2

An attacker exfiltrates data from a cloud environment by encoding it in DNS queries to an external resolver. Which control would MOST effectively detect this?

Accepted Answer

DNS query logging and anomaly detection

Answer

DNS exfiltration bypasses traditional network controls, so logging DNS queries and analyzing volume/entropy anomalies is the most effective detection approach.

Question 3

Which CASB control mode allows an administrator to warn users about policy violations and let them proceed, while logging their decision?

Accepted Answer

Coaching/justify mode

Answer

Coaching (or justify) mode presents a policy warning and requires users to provide a business justification before proceeding, balancing security with productivity.

Question 4

A CSPM tool identifies that multi-factor authentication is not enforced for privileged cloud console accounts. Under which compliance framework would this most likely be cited as a finding?

Accepted Answer

All of the above frameworks address MFA for privileged accounts

Answer

PCI DSS, HIPAA, and SOC 2 all require strong authentication controls for privileged access, making this a cross-framework compliance gap.

Question 5

Which cloud security concept describes the practice of deploying security controls as code within CI/CD pipelines to catch misconfigurations before deployment?

Accepted Answer

Shift-left security

Answer

Shift-left security integrates security testing and policy checks early in the software development lifecycle, preventing misconfigurations from reaching production.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP CASB & Cloud Security Posture 3