CrowdStrike CCCS-203b - CrowdStrike Certified Cloud Specialist Exam
Page: 3 / 12
Total 60 questions
Question #11 (Topic: Exam A)
You want to give your developers time to fix new CVEs.
How can this be efficiently done in Falcon Cloud Security while maintaining security of the environment?
How can this be efficiently done in Falcon Cloud Security while maintaining security of the environment?
A. Create an exclusion of 7 days for newly published vulnerabilities
B. Create an exclusion every time a new CVE is discovered
C. Network contain the hosts affected by the CVE
D. Scan new images 7 days after they are created
Answer: A
Question #12 (Topic: Exam A)
You are concerned about overprivileged containers within your cluster.
Which IOM rule for Kubernetes will alert on containers being deployed with excessive permissions?
Which IOM rule for Kubernetes will alert on containers being deployed with excessive permissions?
A. Container(s) without resource limits
B. Workload without securityContext
C. Container(s) with sysadmin capability
D. Malformed sysctl value
Answer: C
Question #13 (Topic: Exam A)
Your team is reviewing your Kubernetes cluster to ensure compliance with the latest industry benchmarks.
Which is an example of a configuration setting that will be flagged as non-compliant?
Which is an example of a configuration setting that will be flagged as non-compliant?
A. Disabling unnecessary ports on the host firewall
B. Allowing containers to run with root privileges
C. Using a private container registry for all deployments
D. Enabling role-based access control for Kubernetes API access
Answer: B
Question #14 (Topic: Exam A)
What is needed to achieve visibility into the latest AWS IAM 1020 restricted use of AWS CloudShell with the latest CIS Foundations Benchmarks for AWS, Azure, and Google Cloud?
A. Create custom IOM policy
B. Leverage existing IOM policy
C. Create custom IOA policy
D. Leverage existing IOA policy
Answer: B
Question #15 (Topic: Exam A)
Which action should be taken to configure cloud security scan exclusion settings in CrowdStrike?
A. Enable all scans without any exclusions for maximum coverage
B. Exclude all cloud resources to avoid performance issues
C. Define exclusion rules based on file paths to be ignored during scans
D. Only exclude files that have been scanned previously
Answer: C
