Secure Deployment at Host, Network, and Application Levels CASENET Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A .NET application is deployed in a DMZ with a web tier and a database tier. The security architect wants to ensure that the database tier is not directly accessible from the internet. Which network control should be implemented?

   • AAssign a public IP to the database server for easier management from the internet.
   • BConfigure the database to listen on all interfaces and rely on the application's authentication.
   • CUse a single flat network for all tiers to simplify firewall rules.
   • DPlace the database tier in a separate subnet with a network security group that only allows traffic from the web tier subnet.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A .NET application is deployed on a web server that also runs an FTP server for file uploads. The security team wants to reduce the attack surface. What should be done?

   • ADisable the FTP service and use a secure file transfer protocol like SFTP or FTPS.
   • BKeep FTP enabled but restrict access to specific IP addresses.
   • CMove the FTP service to the same port as the web server.
   • DUse FTP only for internal file transfers.
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   A company is deploying a .NET application to a new Windows Server 2022 host. The security team has a limited maintenance window and must balance the need for security with the need for availability. The server will be exposed to the internet. Which approach best balances security and availability?

   • AEnable the firewall with default deny inbound rules and skip patching to avoid downtime.
   • BApply critical security patches immediately, schedule non-critical patches for the next maintenance window, and enable the firewall with default deny inbound rules.
   • CDefer all patches until the next scheduled maintenance window and rely on the firewall for protection.
   • DApply all available patches immediately, even if it requires extending the maintenance window.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which network-level control is used to restrict traffic between different segments of a deployed application's environment?

   • ACode access security
   • BFirewall rules
   • CApplication pool identity
   • DError logging
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A .NET application uses role-based authorization. The security team wants to ensure that only users with the 'Admin' role can access the administration area. What should be configured in the application?

   • ADisable the admin area in the web.config.
   • BUse a custom authorization filter that checks the user's name.
   • CApply an [Authorize(Roles = "Admin")] attribute to the admin controllers.
   • DCheck the user's role in the view and hide admin links.
   Reveal Solution Discussion Select an answer first