Secure Deployment and Maintenance CASEJAVA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A Java web application is being deployed to a new Linux server in a DMZ. The security team mandates that the application must not expose any unnecessary services, and any runtime errors must not reveal internal stack traces to end users. The deployment team plans to use a systemd service to run the JAR. Which two actions must be part of the deployment plan to satisfy these requirements?

   • ADisable all unused network services and set the JVM's -Djava.security.egd property to file:/dev/./urandom
   • BConfigure the application to log stack traces to a file and set the server's error page to a generic message for HTTP 500 responses
   • CSet the JVM's -Dcom.sun.management.jmxremote flag and restrict access to the management port via firewall rules
   • DRun the application with the -Xshare:off flag and disable the server's directory listing feature
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which action is appropriate when decommissioning a Java application that stored customer data?

   • ALeaving the data on the server in case it is needed later
   • BSecurely wiping storage media and revoking all access credentials
   • CTransferring the data to a public cloud storage without encryption
   • DDeleting the database files and emptying the recycle bin
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   During a routine maintenance window, a Java application is restarted. After the restart, the application fails to connect to the database. The configuration files have not been changed. What is the most likely cause?

   • AThe Java application's source code was accidentally deleted during maintenance.
   • BThe application's logging level was changed to DEBUG.
   • CThe database service did not start or is not reachable from the application server.
   • DThe server's timezone was changed during maintenance.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A Java application that stored customer PII is being decommissioned. The database contains both active and archived records. The compliance team requires that all data be unrecoverable after decommissioning, but the operations team needs to retain a copy for a pending legal hold. Which approach satisfies both requirements?

   • AEncrypt the database with a new key, then destroy the key after the legal hold expires
   • BTake a full backup of the database and store it in a secure vault with a 7-year retention policy
   • CDelete the database files and overwrite the free space on the storage volume
   • DMove the database to a separate, isolated storage volume and restrict access to the legal team
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A Java application has been running in production for several years. During a security review, it is discovered that the application's runtime environment uses outdated TLS protocols. The application must maintain compatibility with older clients, but the security team requires modern TLS. What is the most appropriate action?

   • AEnable only TLS 1.3 and immediately block all clients that do not support it.
   • BDisable all TLS and use plain HTTP to simplify configuration.
   • CKeep the outdated TLS protocols enabled to ensure all clients can connect.
   • DEnable TLS 1.2 and 1.3 while disabling older protocols, and provide a migration path for clients that need to upgrade.
   Reveal Solution Discussion Select an answer first