CCP Cloud Workload Protection 3

Question 1

What is the significance of eBPF (extended Berkeley Packet Filter) in modern cloud workload security?

Accepted Answer

It enables low-overhead kernel-level visibility into workload behavior without modifying application code

Answer

eBPF allows security tools to observe system calls, network activity, and process behavior at the kernel level with minimal performance overhead.

Question 2

A company uses Kubernetes. Which resource defines the network traffic rules allowed between pods?

Accepted Answer

NetworkPolicy

Answer

Kubernetes NetworkPolicy resources define ingress and egress rules that control traffic flow between pods, enabling micro-segmentation.

Question 3

What is 'lateral movement' in the context of a cloud workload breach?

Accepted Answer

An attacker moving from one compromised workload to other systems within the environment

Answer

Lateral movement occurs when an attacker uses a compromised workload as a pivot point to access other systems or data within the cloud environment.

Question 4

Which cloud workload protection control BEST prevents privilege escalation attacks within a container?

Accepted Answer

Running containers as non-root with read-only file systems and dropped Linux capabilities

Answer

Running containers as non-root, with read-only file systems and minimal Linux capabilities, significantly limits an attacker's ability to escalate privileges.

Question 5

In cloud workload security, what is 'drift detection'?

Accepted Answer

Identifying changes to a workload's configuration or state that deviate from its approved baseline

Answer

Drift detection identifies when a running workload's configuration, files, or behavior has changed from its approved secure baseline.

(CCP) Certified Cybersecurity Professional Practice Test

(CCP) Certified Cybersecurity Professional Practice Test

CCP Cloud Workload Protection 3