Security Maintenance and Monitoring CASENET Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A healthcare organization must log all authentication events for its ASP.NET Core application to meet HIPAA requirements. The application uses Azure AD for authentication. Which logging configuration is most appropriate?

   • AStore logs only in the application's local file system for easy access by developers.
   • BDisable logging for authentication events to protect user privacy.
   • CLog only successful sign-ins in the application to reduce noise and storage costs.
   • DEnable Azure AD diagnostic settings to send sign-in logs to a Log Analytics workspace and configure the application to log authentication failures.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A development team uses a .NET Core application with several NuGet packages. A vulnerability scan flags a critical flaw in a transitive dependency. The team wants to remediate quickly. What is the most appropriate first step?

   • ARun 'dotnet list package --vulnerable' to identify the exact package version and then update to a patched version.
   • BDisable the vulnerability scanner until the next scheduled release.
   • CDelete the NuGet cache and rebuild the application to force the latest versions of all packages.
   • DChange the project file to reference the latest version of every package without testing.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A .NET application was compromised. The incident response team found that the attacker used a previously unknown vulnerability in a custom library. The team has limited time to restore service. They must decide between restoring from a backup taken before the attack or applying a hotfix to the current system. Which decision is most appropriate?

   • ARestore from the pre-attack backup and then apply the hotfix in a staging environment before returning to production.
   • BRestore from the backup and immediately put the system back online without the hotfix.
   • CApply the hotfix to the current system without restoring the backup to save time.
   • DKeep the system offline until the next scheduled maintenance window.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A multinational company's .NET application processes personal data of EU citizens. The compliance officer requires that security maintenance activities be documented to demonstrate GDPR compliance. What is the most important documentation to maintain?

   • AA list of all employees who have access to the production database.
   • BA copy of the source code for the application.
   • CA record of all security patches applied, including dates, versions, and approval sign-offs.
   • DA backup of the production database taken daily.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A development team uses .NET Core 3.1, which is out of support. The application is deployed to production and a critical vulnerability is announced in the runtime. The team cannot upgrade to .NET 6 or later immediately due to a third-party dependency. What is the best immediate action?

   • AUpgrade to .NET 6 immediately, even if the third-party dependency breaks, and fix the dependency later.
   • BAdd a Web Application Firewall rule to block all requests to the application until the dependency is upgraded.
   • CApply the vendor-provided security patch for .NET Core 3.1 if available, and simultaneously plan a migration to a supported version with a defined timeline.
   • DDisable the affected feature in the application and wait for the third-party dependency to support a newer .NET version before patching.
   Reveal Solution Discussion Select an answer first