Palo Alto Networks Cloud Security Professional (CloudSec-Pro) Free Sample Questions

A large financial institution is utilizing the Cortex Cloud platform to secure its multi-cloud environment. The security team has observed a spike in alerts related to 'Shadow AI' usage, where developers are spinning up unapproved AI models in AWS and Azure. The CISO requires a solution that not only detects these resources but also analyzes the training data for sensitive information exposure. Which module within the Cloud Posture Security domain should the team leverage to meet this specific requirement?

A Cloud Security Administrator is configuring agentless scanning for a production environment containing 500+ EC2 instances. The goal is to detect vulnerabilities without impacting the performance of running applications. Which statement correctly describes the operational mechanism of agentless scanning in this context?

During a SOC investigation, an analyst identifies a suspicious container in a Kubernetes cluster that is attempting to establish a reverse shell connection to an external IP. The cluster is protected by Cortex Cloud Runtime Security. Which specific capability should be configured to automatically block this activity based on the deviation from the container's learned behavior model?

A DevOps team is implementing a 'Shift Left' strategy. They want to ensure that no Infrastructure as Code (IaC) templates (Terraform, Kubernetes manifests) containing misconfigurations—such as open security groups or unencrypted databases—are deployed to the cloud. Which component of Application Security is BEST suited to integrate into their CI/CD pipeline to achieve this?

Which TWO of the following are primary functions of the Cloud Security Posture Management (CSPM) module within the Cortex Cloud platform? (Select TWO)

True or False: Data Security Posture Management (DSPM) relies primarily on network traffic analysis to identify sensitive data exfiltration attempts.