MENU
Which solution performs security assessments and automatically generates alerts when a vulnerability is found?
Suggested Answer: A
Get Premium SC-900 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
41 comments · newest first
MA
Makeda
11 months ago
Yeah, CSPM is the way to go for this!
CA
Carlene
11 months ago
Wait, does DevSecOps really handle alerts automatically?
MA
Makeda
11 months ago
SIEM is more about monitoring, not assessments.
FR
France
12 months ago
Not so sure about that, I thought it was CWPP.
CH
Chanel
12 months ago
I think it's definitely CSPM that does this.
DE
Desmond
1 year ago
I feel like DevSecOps could fit, but it’s more about integrating security into the development process, not just assessments.
NA
Nan
1 year ago
CWPP sounds familiar too, but I thought it was more about protecting workloads rather than generating alerts for vulnerabilities.
DE
Delpha
1 year ago
I remember studying SIEM systems, but they seem more focused on log management rather than proactive vulnerability assessments.
KA
Karina
1 year ago
I think CSPM might be the right answer since it focuses on security assessments in the cloud, but I'm not entirely sure.
EA
Earleen
1 year ago
I'm leaning towards A, but I want to double-check the definitions of these cloud security solutions just to be sure. The key is finding the one that automatically assesses and alerts on vulnerabilities.
TO
Tomas
1 year ago
Okay, let me break this down. CSPM monitors the security posture of cloud environments and identifies misconfigurations, so that sounds like the right answer. DevSecOps and SIEM don't quite fit the description in the question.
JA
Jacqueline
1 year ago
Hmm, I'm not sure about this one. I know CSPM and CWPP both deal with cloud security, but I'm not confident which one specifically does the security assessments and alerts. I'll have to think this through carefully.
VI
Viola
1 year ago
This question seems straightforward. I think the answer is A - cloud security posture management (CSPM) since it performs security assessments and generates alerts for vulnerabilities.
CH
Christiane
1 year ago
Okay, for risk scoring in ServiceNow, I think the two options are Quantitative and Calculated. I'm a bit unsure about the other choices, so I'll focus on those two.
OL
Olene
1 year ago
From what I recall, an additional return to baseline might not be the main thing for efficacy in alternating-treatments designs. Wasn't it more about the clarity in how conditions are presented to participants?
WA
Wai
1 year ago
I'm a little confused by the wording of this question. Let me re-read it a few times to make sure I'm interpreting it correctly before selecting an answer.
EL
Elvera
2 years ago
I'm just going to go with C) CWPP and hope for the best. It's like a cloud version of the old-school 'chicken wire and duct tape' security approach.
GE
Germaine
2 years ago
Yeah, I agree. It's better to have some protection than none at all.
LA
Lauran
2 years ago
I've heard good things about CWPP, hopefully it does the job.
KE
Kenny
2 years ago
I think C) CWPP is a good choice, it's like a safety net for vulnerabilities.
DE
Desmond
2 years ago
Norah: Definitely, especially when it comes to security.
NO
Norah
2 years ago
Yeah, I agree. It's better to be safe than sorry.
TA
Tasia
2 years ago
I think C) CWPP is a good choice, it's like having an extra layer of protection.
GL
Glendora
2 years ago
I heard CSPM stands for 'Cloud Security Posture Meme-agement'. Not sure if that's a real thing, but it sounds hilarious.
MA
Magda
2 years ago
D) security information and event management (SIEM)
JO
Josphine
2 years ago
A) cloud security posture management (CSPM)
GE
Georgeanna
2 years ago
Hey, where's the 'all of the above' option? Seems like a trick question to me. I'll go with B) DevSecOps, just to be on the safe side.
LO
Lorrie
2 years ago
I'm torn between A) CSPM and C) CWPP. Both sound like they could handle security assessments, but I'm not sure which one is more comprehensive.
JA
Jacob
2 years ago
D) SIEM? Really? That's more for monitoring and logging, not automated security assessments. I'd go with B) DevSecOps.
MI
Mitzie
2 years ago
B) DevSecOps
RO
Ronna
2 years ago
D) security information and event management (SIEM)
DO
Dorinda
2 years ago
C) cloud workload protection platform (CWPP)
SA
Salena
2 years ago
B) DevSecOps
PE
Pete
2 years ago
A) cloud security posture management (CSPM)
EL
Elbert
2 years ago
I think both A) and C) could be correct, as they both provide security assessments and alerts for vulnerabilities. It depends on the specific requirements of the organization.
CH
Chi
2 years ago
But CSPM specifically focuses on security posture in the cloud environment, which is crucial for identifying vulnerabilities.
LA
Laura
2 years ago
A) CSPM seems like the right choice here. I've heard it can really help organizations stay on top of cloud security risks.
GE
Gerald
2 years ago
B: Definitely, it's important to have that kind of proactive security measure in place.
BE
Ben
2 years ago
A: I agree, CSPM is great for automatically alerting about vulnerabilities.
GR
Gregoria
2 years ago
I disagree, I believe the answer is C) cloud workload protection platform (CWPP). It also performs security assessments and alerts for vulnerabilities.
CH
Chi
2 years ago
I think the answer is A) cloud security posture management (CSPM). It assesses security and alerts for vulnerabilities.