3.6 Describe Application and Workload Security Concepts Including eBPF 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A development team is creating a web application that allows users to search for products. The application uses a SQL database. The security team wants to prevent SQL injection attacks. Which coding practice should be enforced?

   • ADisable error messages that reveal database details.
   • BUse a stored procedure that concatenates user input into a dynamic SQL string.
   • CEscape all user input using a custom function before including it in SQL statements.
   • DUse parameterized queries or prepared statements for all database access.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security team wants to monitor file access and process execution on a Linux server to detect potential privilege escalation attempts. They need a solution that can be deployed without restarting the server or modifying the kernel. Which technology should they use?

   • AA kernel module that must be compiled and loaded into the running kernel.
   • BA system call logging tool that requires enabling auditd and restarting the audit service.
   • CeBPF-based tracing tools that attach to kernel probes.
   • DA user-space agent that periodically scans the file system for changes.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A financial services company is developing a customer-facing API that processes sensitive personal data. The security team must ensure that the API is protected against injection attacks and that any data breach is contained. They have limited budget and cannot afford a full WAF. Which combination of controls is most effective?

   • AUse a free open-source WAF and rely on it to block all attacks.
   • BDeploy the API in a separate virtual network with no access to other resources.
   • CEncrypt all data in transit and at rest, and use strong authentication.
   • DImplement strict input validation and parameterized queries, and use micro-segmentation to isolate the API from other systems.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which activity is the primary purpose of threat modeling during the software development lifecycle?

   • ATesting the application for performance bottlenecks
   • BEncrypting all data stored by the application
   • CIdentifying and prioritizing potential security threats to the application
   • DAutomatically fixing vulnerabilities in the code
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In the context of security, how is eBPF commonly used for intrusion detection?

   • ABy encrypting all system logs to prevent tampering
   • BBy replacing the need for antivirus software entirely
   • CBy hooking into system calls and network events to detect suspicious behavior in real time
   • DBy blocking all network traffic by default
   Reveal Solution Discussion Select an answer first