CCCS-203B · Question #116
A cloud security engineer is responsible for ensuring that their Kubernetes-based microservices architecture adheres to industry security standards. The organization wants to implement runtime…
The correct answer is D. Falcon Horizon (CSPM). Option A: Falcon Identity Protection helps detect identity-based attacks and credential misuse but does not provide compliance checks for cloud or Kubernetes environments. Option B: Falcon Prevent is a next-generation antivirus (NGAV) solution that protects against malware and…
Question
A cloud security engineer is responsible for ensuring that their Kubernetes-based microservices architecture adheres to industry security standards. The organization wants to implement runtime security best practices and verify that their cluster configuration complies with the latest CIS (Center for Internet Security) benchmarks. Which CrowdStrike Falcon feature should the engineer use to perform a compliance check against industry benchmarks?
Options
- AFalcon Identity Protection
- BFalcon Prevent (NGAV)
- CFalcon Forensics Collection
- DFalcon Horizon (CSPM)
How the community answered
(42 responses)- A5% (2)
- B7% (3)
- C17% (7)
- D71% (30)
Explanation
Option A: Falcon Identity Protection helps detect identity-based attacks and credential misuse but does not provide compliance checks for cloud or Kubernetes environments. Option B: Falcon Prevent is a next-generation antivirus (NGAV) solution that protects against malware and endpoint threats, but it does not assess cloud infrastructure or Kubernetes configurations against compliance benchmarks. Option C: Falcon Forensics is useful for post-incident investigations but does not provide real- time security posture monitoring or compliance checks against industry benchmarks. Option D: Falcon Horizon is CrowdStrike's Cloud Security Posture Management (CSPM) solution, designed to monitor cloud, Kubernetes, and Docker configurations for compliance with security benchmarks such as CIS, NIST, and PCI-DSS. It provides continuous monitoring and remediation recommendations for misconfigurations, making it the best choice for compliance verification.
Topics
Community Discussion
No community discussion yet for this question.