QuestionQ3

Cloud Runtime Security

A DevSecOps team needs CVE visibility in developer code repositories, whereas the cloud security team needs CVE visibility in developer applications at runtime.

Which Cortex Cloud capability is unique to the cloud security team’s requirement?

  • A Static application security testing (SAST)
  • B Vulnerability management
  • C Code to Cloud
  • D Software composition analysis (SCA)
Explanation

Cortex Cloud Vulnerability Management provides code-to-cloud visibility into vulnerabilities in deployed and running workloads, including VMs, containers, Kubernetes, and serverless functions. SCA and SAST are shift-left code-analysis capabilities for repositories, while Code to Cloud describes lifecycle-wide context rather than the runtime vulnerability-management capability.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!