Secure Design Principles CASENET Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A .NET application uses a custom authentication module that sets a FormsAuthentication cookie after verifying the user's credentials. The security team is concerned about session hijacking. Which mitigation strategy should be applied to directly address the threat of session hijacking via cookie theft?

   • ASet the Secure and HttpOnly flags on the authentication cookie and implement short absolute session timeouts.
   • BRegenerate the session ID only on login and keep the session valid for 24 hours.
   • CEncrypt the cookie using machine key settings and rely on SSL for all traffic.
   • DUse a longer random session key and store it in a hidden form field.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A .NET web application allows users to upload profile pictures. The development team is implementing the upload feature and wants to prevent spoofing and tampering risks. They plan to store files in a dedicated folder and serve them via a separate handler. Which combination of controls should they implement to align with secure design principles?

   • AValidate file extension and content type on the server, store files outside the web root, and serve them via a handler that sets Content-Disposition to attachment.
   • BStore files in a database as binary data and always serve them with Content-Type application/octet-stream.
   • CAllow only image extensions and rely on the web server's MIME mapping to handle the files.
   • DRely on client-side JavaScript to check the file type and size before upload, and store files in the web root with random names.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   In the STRIDE threat model, which category covers an attacker modifying data in transit between a .NET client and server?

   • ATampering
   • BRepudiation
   • CElevation of Privilege
   • DSpoofing
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A .NET application has multiple entry points, including a public website, an API for mobile clients, and an internal admin panel. The security team is performing an attack surface analysis. Which action should they take to reduce the attack surface?

   • AConsolidate all entry points into a single API endpoint.
   • BApply the same security controls to all entry points regardless of their function.
   • CAdd more logging and monitoring to all entry points.
   • DRemove or disable any entry points that are not required for business functionality.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A team is threat modeling a new .NET microservice that processes payment transactions. They have identified the assets and drawn a data flow diagram. Which next step should they take to ensure the threat model is actionable?

   • AAsk the security team to review the code for vulnerabilities before finalizing the design.
   • BImmediately implement input validation and authentication controls for all endpoints.
   • CEnumerate all entry points, trust boundaries, and data flows, then apply STRIDE to each element to identify potential threats.
   • DFocus only on the highest-risk components and skip the data flow diagram to save time.
   Reveal Solution Discussion Select an answer first