Which practice is a key part of secure configuration management for secrets?

Embedding secrets in source code for easy access

Sharing secrets via email to the deployment team

Storing secrets in a dedicated secrets management solution

Using the same secret for all environments

A company is deploying a .NET application to a new Windows Server 2022 host. The server will host multiple applications, but only one application is required for the business. The security team wants to minimize the attack surface. Which action should be taken?

Create a separate application pool for each application hosted on the server.

Enable Windows Defender Application Control (WDAC) to restrict allowed applications.

Remove the default IIS website and disable any unused Windows features and services.

Install all available Windows updates and then reboot the server.

During the host-level secure deployment of a .NET application, which practice is most directly associated with OS hardening?

Implementing a Web Application Firewall (WAF) rule set

Setting up database backup schedules

Disabling unnecessary services and closing unused ports

Configuring application-level authentication and authorization

After deploying a .NET application, the security team wants to detect unauthorized access attempts. Which logging configuration should be implemented?

Log only errors that occur in the application code.

Enable IIS request logging and log all failed authentication attempts.

Log only successful requests to reduce noise.

Disable logging to improve performance.

EC-CouncilCertified Application Security Engineer (.NET)

Domain 8Objective 3

Secure Deployment at Host, Network, and Application Levels CASENET Practice Questions (Page 5)

Part of the Security Testing and Secure Deployment domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 21–25

21foundation · easy
Which practice is a key part of secure configuration management for secrets?
Select an answer first
22application · medium
A company is deploying a .NET application to a new Windows Server 2022 host. The server will host multiple applications, but only one application is required for the business. The security team wants to minimize the attack surface. Which action should be taken?
Select an answer first
23foundation · easy
During the host-level secure deployment of a .NET application, which practice is most directly associated with OS hardening?
Select an answer first
24application · medium
After deploying a .NET application, the security team wants to detect unauthorized access attempts. Which logging configuration should be implemented?
Select an answer first
25foundation · easy
Which principle should be applied to service accounts and application permissions during secure configuration management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CASENET

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.