Security Maintenance and Monitoring CASENET Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A .NET application uses a mix of first-party code and third-party NuGet packages. A vulnerability scan identifies a critical flaw in a package that is used only in a rarely used feature. The team must decide whether to patch immediately or wait for the next release. Which factor is most important in this decision?

   • AThe number of lines of code in the package.
   • BThe preference of the development team for a specific version.
   • CThe exploitability of the vulnerability and whether the feature is exposed to untrusted users.
   • DThe age of the package in the NuGet repository.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which element is typically included in a security maintenance plan for a .NET application?

   • AA description of the application's user interface design.
   • BA list of all application users and their passwords.
   • CA detailed history of all code commits made by developers.
   • DA schedule for applying security patches to the .NET framework and third-party libraries.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   An ASP.NET Core application uses custom middleware for authentication. The security team wants to log all authentication failures, including the username attempted, the IP address, and the timestamp. Which approach is most appropriate?

   • ALog all requests to a text file and manually review them weekly.
   • BAdd logging statements in the authentication middleware to capture the required fields and send them to a centralized logging service.
   • CEnable IIS logging and parse the log files for 401 status codes.
   • DUse Windows Event Viewer to monitor security events.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A .NET application is scheduled for a quarterly vulnerability scan. The scan must include both authenticated and unauthenticated testing. Which approach is most appropriate?

   • ARun an unauthenticated scan first, then run an authenticated scan using a test account with minimal privileges.
   • BRun only an authenticated scan with an administrator account to find the most vulnerabilities.
   • CRun the scan during peak business hours to test the application under load.
   • DRun only an unauthenticated scan to avoid the risk of modifying data with the test account.
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A company runs a .NET application that must maintain 99.9% availability. A critical security patch for the .NET runtime is released, but it requires a server restart. The compliance team requires the patch be applied within 7 days. The operations team has a maintenance window of 4 hours every Sunday. What is the best approach?

   • AApply the patch immediately during business hours, accepting the restart downtime.
   • BRequest an extension from the compliance team because the maintenance window is too short.
   • CSkip the patch and rely on the Web Application Firewall to mitigate the vulnerability.
   • DApply the patch during the next Sunday maintenance window, which is within the 7-day deadline, and schedule a rolling restart of the application servers.
   Reveal Solution Discussion Select an answer first