1.2 Compare Security Deployments 200-201 Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A development team uses containerized microservices for a web application. The security team wants to ensure that container images do not contain known vulnerabilities and that containers are isolated from each other at runtime. Which combination of controls should be implemented?

   • ALegacy antivirus on the host operating system
   • BNetwork segmentation with VLANs and a host-based firewall
   • CImage scanning in the CI/CD pipeline and runtime isolation using Kubernetes namespaces
   • DWeb application firewall (WAF) and secure coding practices
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A company is moving its customer relationship management (CRM) system to a SaaS provider. The security team is reviewing the shared responsibility model. Which security control is the company most likely responsible for in this SaaS deployment?

   • APatching the underlying operating system of the CRM servers
   • BManaging user access and configuring multi-factor authentication (MFA) for the CRM application
   • CConfiguring the network firewall for the CRM data center
   • DApplying security updates to the CRM application code
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which of the following is a characteristic of agentless security monitoring?

   • AIt provides deeper visibility into endpoint processes than agent-based methods
   • BIt uses network traffic analysis or APIs to gather data without installing software on endpoints
   • CIt can only be used in on-premises environments
   • DIt requires installing software on each endpoint
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   Which of the following is a key function of a SIEM system?

   • AEncrypting network traffic between sites
   • BCorrelating events from different logs to identify patterns of attack
   • CCreating and enforcing firewall rules
   • DInstalling patches on endpoints
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A development team has deployed a custom web application that accepts file uploads from users. The application is behind a load balancer. The security team wants to add a control that inspects HTTP traffic for malicious payloads, such as embedded scripts in uploaded files, without modifying the application code. Which control should be placed in front of the web servers?

   • AA web application firewall (WAF) with file upload inspection rules
   • BAn intrusion detection system (IDS) placed on the database subnet
   • CA VPN concentrator for remote users
   • DA network firewall with stateful packet inspection
   Reveal Solution Discussion Select an answer first