Practice for the Wiz Cloud Fundamentals exam with 14 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: The Wiz Broker establishes a connection back to the Wiz backend for continuous monitoring. What is the key operational a. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Wiz Cloud Fundamentals practice test →
What you will practice
- The Wiz Broker establishes a connection back to the Wiz backend for continuous monitoring. What is the key op…
- You are setting up Wiz in a CI/CD pipeline using the Wiz CLI. What type of Wiz account authentication is reco…
- Secrets detected by Wiz primarily refer to sensitive information required for authentication and authorizatio…
- Which customer responsibility involves ensuring the confidentiality of credentials for non-human identities a…
- What is the function of using Platform Actions within Wiz Automation Rules?
- Where does Wiz log the activity of a user interacting with the remote Wiz Model Context Protocol (MCP) Server…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. The Wiz Broker establishes a connection back to the Wiz backend for continuous monitoring. What is the key operational advantage this provides compared to older broker models?
Answer: B. It enables the Wiz backend to perform continuous monitoring of the broker's health and activity.
The persistent connection enables the Wiz backend to perform continuous monitoring of the broker's health and activity directly from the portal. This improves reliability over older polling models, though it is important to remember that outbound internet connectivity is still required.
Q2. You are setting up Wiz in a CI/CD pipeline using the Wiz CLI. What type of Wiz account authentication is recommended for integration in production CI/CD environments?
Answer: B. Authentication using a dedicated Wiz service account.
A dedicated Wiz service account is the recommended method for automating tasks in production environments, including CI/CD pipelines. Service accounts provide secure, non-interactive authentication, whereas API tokens generated via the GUI are typically tied to individual users and expire.
Q3. Secrets detected by Wiz primarily refer to sensitive information required for authentication and authorization. Which of the following examples are explicitly listed as cloud secrets detected by Wiz?
Answer: B. API keys, passwords, encryption keys, tokens, and credentials.
Cloud secrets are technical credentials enabling system access, such as API keys, passwords, and tokens. Remember that secrets management in Wiz focuses strictly on authentication artifacts, not broader sensitive business data like financial records or employee information.
Q4. Which customer responsibility involves ensuring the confidentiality of credentials for non-human identities accessing the Wiz platform?
Answer: B. The Customer must manage service accounts and keep Wiz credentials confidential.
The customer is explicitly responsible for managing accounts within their Wiz tenant and keeping associated credentials confidential. While Wiz handles platform security, securing your service account keys ensures safe non-human access to the environment.
Q5. What is the function of using Platform Actions within Wiz Automation Rules?
Answer: B. To trigger changes to Issues and Threats on Wiz itself (e.g., closing an Issue or changing its severity).
Platform Actions are used to trigger changes to objects directly within the Wiz portal, such as modifying issue severity or status. Do not confuse these with cloud actions, which interact with your actual cloud provider to quarantine resources.
Q6. Where does Wiz log the activity of a user interacting with the remote Wiz Model Context Protocol (MCP) Server, such as queries executed by an AI assistant?
Answer: B. The Settings > Audit Log page.
Remote Wiz MCP Server activity is specifically logged on the Settings > Audit Log page. For the exam, remember that user interactions with AI assistants via MCP are treated as auditable platform events, which differ from runtime cloud events.
Q7. What method can be used to tune Wiz policies by identifying intellectual property files under strict access control, ensuring they are not flagged as issues if intentionally present?
Answer: B. Uploading the hash for the file or set of files as a custom file detection.
Custom file detections allow users to upload hashes for specific files, allowing Wiz to monitor their presence based on defined policy tuning needs. Modifying Rego code is used for configuration assessments, not for identifying specific intellectual property files.
Q8. Remediation & Response in AWS uses Automation Rules to trigger remediation workflows. Which core AWS service acts as the serverless parser function that translates the incoming Wiz Issue JSON payload into actionable metadata for the playbo…
Answer: C. AWS Lambda function.
In AWS Remediation and Response, a serverless parser function running on Lambda receives the event payload and converts the Issue data into details needed by the remediation playbooks. SQS and SNS handle message routing rather than parsing the JSON payload.
Q9. When assessing entitlements, Wiz applies the data scanner to identify sensitive data. Which step must occur first, according to the Wiz analysis process, before the data scanner takes a sample of the data?
Answer: B. Wiz must calculate the effective exposure of all detected resources.
Wiz calculates effective exposure and permissions before initiating the data scanner process, as context on exposure and access is necessary to properly assess risk. Threat detection rules trigger alerts, whereas exposure determines if data scanning is warranted.
Q10. A Wiz Cloud Advanced customer wants to integrate with Cycode (an ASPM platform) for bidirectional information sharing. What behavior does Cycode perform by pulling container image vulnerabilities from Wiz?
Answer: B. Correlating the vulnerabilities in Cycode with relevant information from the source code for remediation.
Cycode pulls container image vulnerabilities from Wiz to correlate them with source code information, facilitating root cause analysis and code-level remediation. Wiz does not automatically fix the container vulnerabilities, nor does Cycode enrich the Wiz Security Graph directly.
Q11. Remediation & Response is a feature that allows users to fix common cloud misconfigurations from within the Wiz portal. If an administrator wishes to create a custom response function for AWS, what programming language should the function…
Answer: C. Python
Custom response functions for AWS remediation in Wiz must be written in Python to align with the AWS Lambda execution environment. Rego is used for policy authoring, while other languages are not supported for these specific custom remediation scripts.
Q12. If a workload is exposed to the internet, but a third-party firewall or network virtual appliance (NVA) proxies the connection, leading to incomplete exposure modeling in Wiz, this suggests which type of scenario?
Answer: B. A common scenario where Wiz lacks direct access due to non-onboarded external components.
Incomplete exposure modeling often occurs when third-party firewalls or network virtual appliances are not properly onboarded into Wiz. Because Wiz relies on visibility, unmanaged external proxies create blind spots rather than indicating an agentless scanning failure.
Q13. Which core principle of Wiz architecture ensures that all changes to the environment are performed via automated code, and manual changes are strictly governed or disallowed?
Answer: C. Infrastructure-as-code (IaC)
Infrastructure-as-code enforces automated and traceable changes, establishing a strict change management baseline. On the exam, remember that immutable infrastructure replaces servers instead of modifying them, making it the wrong choice for governing manual code changes.
More Wiz Cloud Fundamentals drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.