3.6 Describe Application and Workload Security Concepts Including eBPF 350-701 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is developing a mobile application that syncs data with a cloud backend. The security team wants to ensure that the application is secure against reverse engineering and that the backend is protected against unauthorized access. They have a limited budget. Which combination of controls is most cost-effective?

   • AUse a third-party security testing service to perform a one-time penetration test.
   • BRely on the mobile app store's security review and use a public cloud provider's default security settings.
   • CUse a hardware security module (HSM) to store all cryptographic keys and require a VPN for all backend access.
   • DUse code obfuscation for the mobile app and implement strong authentication and authorization for the backend API.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is migrating its on-premises applications to a cloud environment. The security team wants to ensure that each application is isolated from others and that the isolation is configurable and manageable through APIs. Which workload security approach should they choose?

   • AUse a single virtual network for all applications and rely on host firewalls.
   • BUse software-defined segmentation with security groups and policies managed via cloud APIs.
   • CDeploy each application on a separate physical server.
   • DEncrypt all traffic between applications using TLS.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which security control is specifically used to limit communication between workloads in a cloud environment?

   • AMicrosegmentation
   • BVulnerability scanning
   • CMulti-factor authentication
   • DData encryption at rest
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which eBPF capability is most directly used for runtime protection of applications?

   • ACompiling application source code to prevent vulnerabilities
   • BProviding a graphical user interface for security analysts
   • CStoring encrypted backups of application data
   • DEnforcing security policies by intercepting and allowing or denying system calls
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A development team is building a web application that allows users to upload profile pictures. The security team wants to ensure that the upload process does not introduce vulnerabilities. Which combination of controls should be implemented?

   • AOnly check the file extension and store files in the same directory as the application.
   • BUse a WAF to block any request that contains a file upload.
   • CEncode all file names using base64 and store them in a database.
   • DValidate file type and size, store files in a separate location, and serve them with a Content-Disposition header.
   Reveal Solution Discussion Select an answer first