Which of the following is the correct step when setting up an automated assessment schedule for Cloud Security Posture Management (CSPM) in CrowdStrike?

Question

Options

• AUse the CrowdStrike API to trigger one-time scans only when issues are suspected.
• BManually initiate security posture assessments each time a review is required.
• CEnable default cloud provider security tools and assume CrowdStrike will synchronize
• DDefine a schedule in the CrowdStrike console, specifying the frequency and cloud account scope.

• A
  6% (1)
• B
  6% (1)
• D
  89% (16)

Explanation

Option A: Using the CrowdStrike API to trigger one-time scans can supplement assessments but is not a replacement for an automated schedule. Without regular scans, potential vulnerabilities may go unnoticed, reducing overall security efficacy. Option B: Manually initiating security posture assessments each time is inefficient and prone to human error. CSPM tools like CrowdStrike support automated scheduling to ensure consistent monitoring and compliance without manual intervention. Option C: While enabling default cloud provider security tools is a good practice, these tools are separate from CrowdStrike's CSPM capabilities. Assuming synchronization without explicitly setting up a schedule in CrowdStrike will leave the assessments incomplete. Option D: Defining a schedule in the CrowdStrike console is the correct approach. The console provides options to set frequency (e.g., daily, weekly) and scope (e.g., specific cloud accounts or all accounts), ensuring continuous posture monitoring. This setup is foundational for proactive security management.

No community discussion yet for this question.