Attack Surface CAS-005 Practice Questions (Page 7)

Questions 31–33

1. 31application · medium

   A healthcare organization is deploying a new patient portal. The portal front-end is hosted in a public cloud, while the patient database remains on-premises. The portal must allow patients to view their lab results. The security team is performing a data flow analysis. Which action is the MOST important to take to protect the data as it crosses the trust boundary?

   • AEncrypt the database files at rest.
   • BPlace the database behind a firewall with strict rules.
   • CRequire multi-factor authentication for all portal users.
   • DImplement TLS for all communications between the portal and the database.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company is migrating a legacy monolithic application to a microservices architecture. The security architect is evaluating the new architecture. Which approach BEST reduces the attack surface compared to the legacy design?

   • AUse an API gateway as the single entry point for all client requests.
   • BExpose each microservice with its own public endpoint for direct client access.
   • CDeploy each microservice in a separate VPC with no network controls between them.
   • DAllow direct database access from each microservice to reduce latency.
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   What is a common strategy for managing trust boundaries?

   • AImplementing strong authentication at each boundary
   • BUsing the same password for all systems
   • CAllowing all traffic to pass freely
   • DRemoving all security controls
   Reveal Solution Discussion Select an answer first