WIZ-CNAPP Practice Test

WIZ-CNAPP practice test: what's covered

• Wiz
• Security Graph
• CSPM
• CWPP
• CIEM
• DSPM
• Attack Paths

Free WIZ-CNAPP sample questions

1. CNAPP (Cloud-Native Application Protection Platform) is BEST described as:

   • A. A single firewall
   • B. An umbrella platform consolidating CSPM, CWPP, CIEM, DSPM, and container/K8s security on a shared data model — replacing siloed point tools with one correlated view of cloud risk
   • C. A backup product
   • D. A DNS service
   Show answer

   Correct: B. CNAPP unifies posture (CSPM), workload (CWPP), identity (CIEM), data (DSPM), and container/K8s security on one data model. The value is correlation across these domains, not five disconnected tools.

2. Wiz's core architectural primitive that correlates risk across all these domains is:

   • A. A flat list of alerts
   • B. The Wiz Security Graph — a property graph modeling cloud resources, identities, network, vulnerabilities, secrets, and data as nodes/edges so relationships and attack paths are queryable
   • C. A BGP table
   • D. A spreadsheet export
   Show answer

   Correct: B. The Security Graph is the heart of Wiz. By modeling everything as connected nodes/edges, it can surface attack paths and toxic combinations that a flat findings list can't — relationships are first-class.

3. Which TWO are pillars consolidated by a CNAPP like Wiz? (Choose 2)

   • A. CSPM (Cloud Security Posture Management — misconfigurations/compliance)
   • B. CIEM (Cloud Infrastructure Entitlement Management — identities/permissions)
   • C. BGP route reflection
   • D. On-prem tape backup
   Show answer

   Correct: A and B. CNAPP pillars: CSPM, CWPP, CIEM, DSPM, plus container/K8s and (increasingly) AI security. BGP/tape backup are not CNAPP capabilities. Wiz correlates these pillars via the graph.

4. The primary benefit of correlating findings on a graph vs a flat list is:

   • A. Prettier UI only
   • B. It reveals attack paths / toxic combinations — chains of individually-minor issues that together create real exploitable risk — and prioritizes them over isolated low-impact findings
   • C. It uses BGP
   • D. It is slower
   Show answer

   Correct: B. A vuln + a public exposure + an over-permissioned identity + sensitive data, individually "medium", together form a critical attack path. The graph connects them; a flat list buries them. This is CNAPP's killer capability.

5. Wiz is delivered as:

   • A. An on-prem appliance only
   • B. A SaaS platform that connects to your cloud environments (AWS/Azure/GCP/OCI/Kubernetes) via API to build the graph and assess risk
   • C. A BGP router
   • D. A desktop app
   Show answer

   Correct: B. Wiz is SaaS. It connects to cloud accounts via API (and agentless scanning) to inventory and assess. Multi-cloud coverage on one platform is a key selling point — one graph across AWS, Azure, GCP, OCI, K8s.

Last updated: 2026-10-19

WIZ-CNAPP practice test FAQ