Secure Deployment and Maintenance CASEJAVA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A production Java application is suspected of being compromised. The incident response team needs to preserve evidence while minimizing downtime. The application runs on a virtual machine in a private cloud. Which first step best balances evidence preservation with the need to restore service quickly?

   • AImmediately shut down the VM and restore from the last known-good backup
   • BTake a snapshot of the VM's disk and memory, then isolate the VM from the network
   • CDelete the VM and recreate it from the latest golden image
   • DRun a full antivirus scan on the VM and remove any detected malware
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A Java application uses a third-party library that has a newly disclosed vulnerability. The vendor has not yet released a patch. What is the most appropriate interim mitigation?

   • AIgnore the vulnerability because no patch is available.
   • BApply a virtual patch or workaround, such as a Web Application Firewall (WAF) rule, to block exploitation attempts.
   • CDisable the application's public access until the vendor releases a patch.
   • DRemove the library from the application and rewrite all code that uses it.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is a key benefit of centralized logging for a Java application deployed across multiple servers?

   • AIt automatically patches vulnerabilities in the application
   • BIt simplifies correlating events from different servers to detect distributed attacks
   • CIt reduces the application's memory usage
   • DIt eliminates the need for application-level authentication
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which action is part of the recovery phase after a security incident in a Java application?

   • ARestoring the application from a known-good backup and verifying its integrity
   • BDeleting all backup copies to prevent reinfection
   • CReusing the same compromised credentials to avoid changing passwords
   • DIgnoring the incident if the application appears to be working normally
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the first step in an effective incident response process for a Java application?

   • ADeleting all logs to prevent attackers from seeing them
   • BContacting law enforcement before any internal actions
   • CPreparation, including defining roles, procedures, and communication plans
   • DImmediately shutting down all servers to prevent further damage
   Reveal Solution Discussion Select an answer first