CLOUDSEC-PRO: Palo Alto Networks Certified Cloud Security ProfessionalDemo

Question

A developer creates a serverless application that extracts a field from a file in an S3 bucket. The Lambda function has the S3FullAccess managed policy assigned.

Question Image

Refer to the scenario to answer this question:

The serverless function fails to sanitize its inputs, allowing code injection. As a result, malware is downloaded by a backend API server that is supposed to receive the API key from the function.

Which two capabilities could the API server use to detect the malware?

Choose two

A Cloud Security Posture Management (CSPM)
B Attack surface
C Cloud Detection and Response (CDR)
D Agentless disk scanning

Explanation

Cloud Detection and Response can identify malicious activity affecting cloud workloads, and agentless disk scanning can inspect the API server’s disk for malicious files. CSPM focuses on cloud configuration risks, while attack-surface capabilities focus on discovering and assessing exposed assets rather than detecting malware on a server.

CLOUDSEC-PRO: Palo Alto Networks Certified Cloud Security ProfessionalDemo

AstroTutor

Notes

Readiness

QuestionQ10

Community Discussion