Practice for the Wiz Cloud Fundamentals exam with 15 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: When using an AI Assistant (like Claude Desktop) to connect to the remote Wiz Model Context Protocol (MCP) server, where. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Wiz Cloud Fundamentals practice test →
What you will practice
- When Wiz scans workloads for malware, which method does the workload scanner use to perform this analysis?
- When a Wiz Issue is resolved, what two key pieces of information are retained for 180 days after resolution a…
- If you want to prevent unauthorized configurations from reaching production, which policy enforcement tool sp…
- Which page in the Wiz portal provides visibility into your cloud spending and optimization recommendations?
- What is the primary benefit of using the Wiz SDK for Python over direct API calls?
- When configuring a push Integration in Wiz, what utility is provided to allow customization of the data sent…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. When Wiz scans workloads for malware, which method does the workload scanner use to perform this analysis?
Answer: C. Agentless scanning of a snapshot or disk created from the running workload.
Wiz performs malware analysis using agentless scanning of a snapshot or disk clone, avoiding any impact on the live workload. For the exam, always associate malware detection with offline snapshot analysis rather than agents or network tapping.
Q2. When a Wiz Issue is resolved, what two key pieces of information are retained for 180 days after resolution as 'Issue resolution evidence'?
Answer: C. A sample of related Findings and a mini-graph showing which objects were deleted or changed.
Issue resolution evidence includes a sample of related findings and a mini-graph detailing which objects were modified or deleted, which is retained for 180 days. Be careful not to confuse this with full attack path JSONs, as Wiz only retains a specific snapshot for compliance tracking.
Q3. If you want to prevent unauthorized configurations from reaching production, which policy enforcement tool specifically leverages Cloud Configuration Rules (CCRs) and Rego to audit or block deployments in Kubernetes clusters?
Answer: C. Wiz Admission Controller (Wiz AC).
The Wiz Admission Controller enforces policies defined using Cloud Configuration Rules to audit or block resource creation in Kubernetes clusters. Do not confuse this with the Wiz Broker, which acts as an integration gateway rather than an in-cluster enforcement tool.
Q4. Which page in the Wiz portal provides visibility into your cloud spending and optimization recommendations?
Answer: B. Explorer > Cloud Cost
Cloud spending visibility and optimization recommendations are found on the Explorer menu under the Cloud Cost page. Avoid choosing Inventory or Policies, as those focus on asset tracking and rule configuration rather than financial data.
Q5. What is the primary benefit of using the Wiz SDK for Python over direct API calls?
Answer: B. It eliminates the need to handle configuration, token management, rate limiting, and pagination manually.
The Python SDK streamlines programmatic interaction by abstracting away complex operational overhead like configuration, authentication token management, rate limiting, and pagination. The SDK handles the API plumbing automatically rather than supporting custom policy languages.
Q6. When configuring a push Integration in Wiz, what utility is provided to allow customization of the data sent in the outgoing payload?
Answer: B. Template variables.
Template variables are used within the action configuration to define and customize specific data fields included in the outgoing payload to third-party tools. You are simply formatting a payload rather than writing GraphQL queries or complex scripts.
Q7. In the context of the Wiz Terraform Provider, which core resource is used to manage the deployment and configuration of the infrastructure required for automated Remediation & Response in a cloud environment?
Answer: C. wiz_remediation_and_response_deployment_v2
The wiz_remediation_and_response_deployment_v2 resource is used to programmatically manage the customer-side infrastructure components needed for Remediation & Response. For the exam, remember that Wiz uses Terraform providers specifically to automate secure remediation deployments.
Q8. In the context of effective permissions analysis, what is the primary goal that Wiz helps prevent when analyzing IAM policies, service control policies, and boundary policies?
Answer: B. Overprivileging and lateral movement.
Analyzing effective permissions helps identify and remediate risks associated with overprivileging and potential lateral movement paths. Cloud identity and entitlement management focuses on access control, not malware prevention or denial of service mitigation.
More Wiz Cloud Fundamentals drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.