CCCS-203b

CCCS-203b practice questions, page 3 of 3, with answer review and explanations.

Question 11

You want to give your developers time to fix new CVEs.How can this be efficiently done in Falcon Cloud Security while maintaining security of the environment?

  1. Create an exclusion of 7 days for newly published vulnerabilities
  2. Create an exclusion every time a new CVE is discovered
  3. Network contain the hosts affected by the CVE
  4. Scan new images 7 days after they are created

Question 12

You are concerned about overprivileged containers within your cluster.Which IOM rule for Kubernetes will alert on containers being deployed with excessive permissions?

  1. Container(s) without resource limits
  2. Workload without securityContext
  3. Container(s) with sysadmin capability
  4. Malformed sysctl value