A .NET web application uses forms authentication and has a login page. The security team wants to prevent brute-force attacks while maintaining a good user experience. Which approach best balances security and usability?

Implement account lockout after a certain number of failed attempts, but allow temporary lockout with automatic unlock after a short period.

Do not implement any lockout and rely on CAPTCHA after multiple failed attempts.

Implement permanent account lockout after a single failed attempt.

Implement a delay of 10 seconds after each failed login attempt.

Which web server hardening measure helps prevent directory traversal attacks?

Using a self-signed certificate

Setting a short session timeout

What is the primary purpose of setting up monitoring and logging during deployment?

To detect and respond to security incidents

To improve application performance

EC-CouncilCertified Application Security Engineer (.NET)

Domain 8Objective 3

Secure Deployment at Host, Network, and Application Levels CASENET Practice Questions (Page 2)

Part of the Security Testing and Secure Deployment domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 6–10

6foundation · easy
Which host-level security measure is specifically intended to address known vulnerabilities in the operating system or installed software?
Select an answer first
7expert · medium
A .NET web application uses forms authentication and has a login page. The security team wants to prevent brute-force attacks while maintaining a good user experience. Which approach best balances security and usability?
Select an answer first
8foundation · easy
Which web server hardening measure helps prevent directory traversal attacks?
Select an answer first
9foundation · easy
What is the primary purpose of setting up monitoring and logging during deployment?
Select an answer first
10foundation · easy
Which component of the deployment environment should be secured against SQL injection attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CASENET

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.

Secure Deployment at Host, Network, and Application Levels CASENET Practice Questions (Page 2)

Questions 6–10

Which host-level security measure is specifically intended to address known vulnerabilities in the operating system or installed software?

A .NET web application uses forms authentication and has a login page. The security team wants to prevent brute-force attacks while maintaining a good user experience. Which approach best balances security and usability?

Which web server hardening measure helps prevent directory traversal attacks?

What is the primary purpose of setting up monitoring and logging during deployment?

Which component of the deployment environment should be secured against SQL injection attacks?

Keep studying — Security Testing and Secure Deployment