Secure Deployment and Maintenance CASEJAVA Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A Java application is being deployed to a new environment. The security team requires that the application's runtime environment be hardened, but the operations team wants to minimize deployment time. Which approach best balances security and efficiency?

   • AManually configure each server's security settings after deployment.
   • BSkip hardening to meet the deployment deadline and schedule it for the next maintenance window.
   • CUse a hardened base image with security configurations pre-applied, and update it through the organization's patch management process.
   • DDeploy the application first and harden the environment after it is running.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A Java application is being decommissioned. The application stored sensitive customer data in a database and used a shared service account. Which step is essential to prevent data leakage after decommissioning?

   • ARename the database and keep it available for a few months in case data is needed.
   • BOnly remove the application's user interface and leave the backend services running.
   • CDelete the application's source code from the repository but leave the production server untouched.
   • DSecurely erase or destroy the database storage media and revoke the service account's access.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A Java application processes sensitive user data and is required to undergo a quarterly security review. During a routine maintenance window, the security team needs to verify that no unauthorized changes have been made to the application's configuration files since the last review. Which approach provides the most reliable evidence of configuration integrity?

   • ACheck the file modification timestamps on the configuration files
   • BAsk the system administrator to confirm that no changes were made
   • CReview the application's access logs for any failed login attempts during the maintenance window
   • DCompare the current configuration files against a known-good baseline stored in a version control system
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A Java application uses a connection pool to a database. The database credentials are stored in a configuration file that is read at startup. The security team wants to rotate the credentials without restarting the application. Which approach allows this?

   • AUse the application's JMX interface to update the DataSource's password attribute at runtime
   • BUse a JNDI DataSource with a custom ConnectionPoolDataSource that periodically reloads credentials from a secure vault
   • CChange the database password and update the connection pool's internal cache using a SQL command
   • DUpdate the configuration file and restart the application
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A Java application's logs contain sensitive information such as credit card numbers. The security team wants to reduce the risk of data exposure while maintaining the ability to troubleshoot. What should be implemented?

   • AEncrypt the log files and store the decryption key on the same server.
   • BDisable all logging to prevent sensitive data from being recorded.
   • CConfigure log masking or redaction to replace sensitive data with placeholders before logs are written.
   • DRestrict access to log files to only the application's service account.
   Reveal Solution Discussion Select an answer first