CCP Cloud Workload Protection 2

Question 1

Which technology provides runtime protection for containerized workloads by monitoring system calls and blocking anomalous behavior?

Accepted Answer

Runtime Application Self-Protection (RASP)

Answer

RASP monitors and intercepts system calls at runtime to detect and block anomalous behavior within containerized workloads.

Question 2

A security team discovers that a cloud VM is exfiltrating data to an unknown IP address. What is the BEST immediate containment action?

Accepted Answer

Isolate the VM using security group rules to block outbound traffic

Answer

Isolating the VM via security group rules stops the exfiltration while preserving forensic evidence for investigation.

Question 3

What is the primary purpose of a Cloud Workload Protection Platform (CWPP)?

Accepted Answer

To provide visibility and protection for workloads across hybrid and multi-cloud environments

Answer

CWPPs are designed to secure workloads (VMs, containers, serverless) across hybrid and multi-cloud environments with unified visibility.

Question 4

In the context of cloud workload protection, what does 'shift-left security' mean?

Accepted Answer

Integrating security earlier in the software development lifecycle

Answer

Shift-left security means incorporating security controls and testing earlier in the CI/CD pipeline rather than only at deployment.

Question 5

Which serverless security concern is unique compared to traditional VM-based workload protection?

Accepted Answer

Ephemeral execution environment making persistent agent-based protection impractical

Answer

Serverless functions are ephemeral and short-lived, making traditional persistent agent-based security tools impractical for protection.

(CCP) Certified Cybersecurity Professional Practice Test