Secure Deployment at Host, Network, and Application Levels CASENET Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A .NET application runs under a service account. The security team requires that the account have the minimum permissions necessary. What is the best practice?

   • AAdd the service account to the local Administrators group for convenience.
   • BGrant the service account only the permissions required for the application to function.
   • CUse the built-in SYSTEM account for all services.
   • DShare a single service account across multiple applications.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which logging practice is important for ensuring that security logs are available for incident investigation?

   • AStoring logs only on the local server
   • BDeleting logs after 24 hours
   • CDisabling verbose logging to save space
   • DCentralized log aggregation and retention
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company is deploying a .NET application with a tight maintenance window. The security team requires post-deployment verification, but the operations team wants to minimize downtime. What is the best way to balance these requirements?

   • ASkip post-deployment verification to meet the maintenance window.
   • BUse a canary deployment to test the application with a small subset of users.
   • CPerform verification manually after the maintenance window closes.
   • DPerform automated post-deployment security checks as part of the deployment pipeline.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company is planning a deployment of a .NET application. The security team requires that the deployment process include a rollback plan. Which phase of the secure deployment lifecycle does this address?

   • ADeployment execution
   • BPost-deployment verification
   • CMonitoring and logging
   • DPre-deployment checks
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   After deploying a .NET application, the security team wants to set up monitoring to detect potential SQL injection attacks. What should be monitored?

   • AApplication error logs only.
   • BNetwork traffic on the database server.
   • CCPU usage on the web server.
   • DDatabase query logs for unusual or malformed SQL statements.
   Reveal Solution Discussion Select an answer first