Secure Application Architecture CASENET Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   During a threat modeling exercise for a .NET web application, the team uses the STRIDE model. They identify that an attacker could tamper with the application's session cookie to escalate privileges. Which STRIDE category does this threat fall under, and what is the primary mitigation?

   • ASpoofing; mitigate by using HTTPS for all requests.
   • BTampering; mitigate by signing the session cookie and validating it on the server.
   • CInformation disclosure; mitigate by encrypting the cookie.
   • DDenial of service; mitigate by rate limiting requests.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A .NET application stores sensitive documents in Azure Blob Storage. The application uses a shared access signature (SAS) to allow users to download files. The security team is concerned that a leaked SAS URL could be used by an attacker to access all files in the container. Which approach should be used to limit the impact of a leaked SAS?

   • AUse a single SAS for all users to reduce management overhead.
   • BStore the SAS in the client-side code and rely on HTTPS to protect it.
   • CUse a short-lived SAS with read-only permissions and a limited IP range.
   • DUse a long-lived SAS with full permissions to simplify client access.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A .NET e-commerce application stores user passwords in a SQL Server database. The security team requires that passwords be protected even if the database is compromised. The application must also prevent attackers from using the same password across multiple user accounts. Which approach should the architect implement?

   • AStore passwords in a separate table with column-level encryption using a database certificate.
   • BHash passwords with SHA-256 and store the hash in the database.
   • CStore passwords using a salted, iterated key derivation function such as PBKDF2 or bcrypt.
   • DEncrypt passwords with AES-256 using a hard-coded key in the application configuration.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A .NET application uses a REST API that is publicly accessible. The threat model identifies that an attacker could perform a man-in-the-middle attack to intercept and modify API responses. The application currently uses HTTPS but does not enforce certificate pinning. The team is considering adding certificate pinning to the mobile client. However, the API is also consumed by a web application that cannot easily implement pinning. What is the best approach to mitigate the risk?

   • ADisable certificate pinning because it can cause availability issues.
   • BUse a custom certificate authority and require all clients to trust it.
   • CImplement mutual TLS for all clients, including the web application.
   • DImplement certificate pinning in the mobile client and rely on HTTPS for the web application.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A .NET application is deployed on a single web server with a SQL Server database on the same host. The security team wants to apply the principle of defense in depth. Which change best reflects this principle?

   • AInstall antivirus software on the web server.
   • BEnable Windows Firewall on the web server.
   • CUse a strong password for the database administrator account.
   • DPlace the database on a separate server and restrict network access to the web server only.
   Reveal Solution Discussion Select an answer first