Secure Deployment at Host, Network, and Application Levels CASENET Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is deploying a .NET web application to a new Windows Server 2022 host that will be exposed to the internet. The security team requires that the host be hardened before the application is installed. Which action should be taken FIRST to reduce the attack surface?

   • AInstall the latest security patches and enable Windows Defender Firewall with default deny inbound rules.
   • BConfigure the application pool to run under a least-privilege service account.
   • CDisable all unnecessary Windows services and remove the default IIS website.
   • DEnable IIS request filtering and set URL length limits.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A .NET application is deployed in a hybrid cloud environment. The web tier is in a public cloud, and the database tier is on-premises. The security team requires that the database tier not be exposed to the internet. What is the most secure way to connect the web tier to the database tier?

   • APlace the database in the same public cloud region as the web tier.
   • BUse a public IP for the database server and rely on the application's authentication.
   • CExpose the database to the internet with a strong firewall rule.
   • DUse a site-to-site VPN between the cloud and on-premises network.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A .NET web application uses Windows authentication and is deployed to an intranet. The security team wants to ensure that only authorized users can access the application. Which configuration should be applied?

   • AUse forms authentication with a custom user database.
   • BSet the application pool identity to the LocalSystem account.
   • CEnable anonymous authentication in IIS and rely on the application's custom authorization logic.
   • DConfigure the application to use Windows authentication and restrict access to specific Active Directory groups.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A .NET application is deployed in a multi-tier environment. The security team wants to ensure that the web server can only communicate with the application server, and the application server can only communicate with the database server. What is the best way to enforce this?

   • AUse a single firewall rule that allows all traffic between all servers.
   • BRely on the application's authentication to prevent unauthorized access.
   • CPlace all servers in the same subnet and use host-based firewalls.
   • DUse network segmentation with security groups that allow only specific traffic between tiers.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A .NET application is deployed in a cloud environment. The application communicates with a backend API over HTTPS. The security team requires that the communication between the web server and the API server be encrypted. Which control should be implemented?

   • APlace the web server and API server in the same subnet and use network security groups to restrict access.
   • BUse a VPN tunnel between the web server and the API server.
   • CConfigure the API server to only accept requests from the web server's IP address.
   • DUse TLS 1.2 or higher for all communications between the web server and the API server.
   Reveal Solution Discussion Select an answer first