Why Applications Become Vulnerable to Attacks CASENET Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why can prioritizing convenience over security lead to application vulnerabilities?

   • AIt forces the use of cloud services
   • BIt often results in weaker security controls that are easier for attackers to bypass
   • CIt always makes the application slower
   • DIt increases the number of users
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How can lack of security training contribute to application vulnerabilities?

   • AIt increases the number of features
   • BIt makes the application run slower
   • CDevelopers may unknowingly use insecure coding patterns
   • DIt causes the application to crash more often
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A team is developing a new application and wants to integrate security into the development lifecycle. They have limited resources and cannot afford a full security team. Which approach is most effective for a small team?

   • AHire an external security firm to test the application after deployment
   • BUse automated security scanning tools in the CI/CD pipeline and provide security training to developers
   • CRely on the developers to write secure code without any additional tools or training
   • DPerform a manual security review only at the end of the project
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What distinguishes an insider threat from an external attacker?

   • AInsider threats have legitimate access to the system
   • BExternal attackers only exploit network vulnerabilities
   • CExternal attackers always have more technical skill
   • DInsider threats only cause accidental damage
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A team is developing a .NET web application that will be deployed on the internet. During threat modeling, they identify that the application's administrative interface is accessible from the public internet. Which action is most effective in reducing the attack surface?

   • AUse a longer admin password.
   • BConduct a penetration test after deployment to find vulnerabilities in the admin interface.
   • CAdd a CAPTCHA to the admin login page.
   • DRestrict access to the administrative interface to specific internal IP addresses or require a VPN.
   Reveal Solution Discussion Select an answer first