Secure Design Principles CASENET Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A .NET application has a feature that allows users to export reports. The export function runs with elevated privileges to access a shared network folder. The security team wants to apply the principle of least privilege. What should they do?

   • AGrant the application's main account write access to the shared folder as well.
   • BUse the current elevated account but restrict access to the export feature to a few users.
   • CCreate a dedicated service account with only read access to the specific shared folder needed for exports.
   • DRun the export function in a separate process with the same elevated privileges.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A .NET application exposes an administrative API that is currently accessible from the public internet. The API includes endpoints for user management and configuration changes. The security team wants to reduce the attack surface while maintaining necessary functionality. Which approach best achieves this?

   • ADisable all endpoints that are not currently used and leave the rest public.
   • BMove the API to a separate subdomain and rely on security through obscurity.
   • CKeep the API public but add rate limiting and logging to detect abuse.
   • DRestrict the API to internal network access and require strong authentication and authorization for all endpoints.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A .NET MVC application has an endpoint that allows authenticated users to upload profile pictures. The endpoint accepts any file extension and stores files in the web root under /uploads. The development team wants to minimize the attack surface for this feature. Which combination of changes best reduces the attack surface while maintaining functionality?

   • ARename uploaded files to a GUID and keep them in the web root with the original extension.
   • BRestrict allowed extensions to a whitelist (e.g., .jpg, .png), store files outside the web root, and serve them via a dedicated handler that sets the correct Content-Type.
   • CStore files in a database as binary data and serve them through a generic download endpoint that streams the bytes.
   • DCheck the file's magic bytes and reject any file that does not match the expected image signature.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which action is most effective in reducing the attack surface of a .NET web application?

   • ADisabling unused HTTP methods and removing unnecessary endpoints
   • BUsing a newer version of the .NET framework
   • CAdding more logging to capture all user actions
   • DIncreasing the password length requirement for users
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A .NET application allows users to upload files that are then processed by a background service. The team is threat modeling and identifies a threat where an attacker uploads a file with a malicious payload that is executed by the processing service. Which STRIDE category does this threat belong to, and what is the most appropriate mitigation?

   • AElevation of Privilege; mitigate by running the processing service with the least privilege and in a sandboxed environment.
   • BSpoofing; mitigate by validating the file's digital signature.
   • CDenial of Service; mitigate by limiting file size.
   • DInformation Disclosure; mitigate by scanning files for malware.
   Reveal Solution Discussion Select an answer first