Application Security in Cloud CCSE Practice Questions (Page 11)

Questions 51–52

1. 51application · medium

   A company is developing a new cloud-native application using a microservices architecture. The security team wants to integrate security practices into the development process. Which activity should be performed during the design phase of the secure SDLC?

   • ADeploy the application to a staging environment and run a DAST tool.
   • BConduct a threat modeling session to identify potential threats and attack vectors for each microservice.
   • CConfigure the cloud provider's monitoring and alerting tools.
   • DRun a SAST tool on the source code to identify coding flaws.
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   Which security testing activity is most appropriate to perform during the implementation phase of the SDLC to catch vulnerabilities early?

   • APenetration testing against the production environment
   • BRuntime application self-protection (RASP) deployment
   • CPost-deployment monitoring and alerting
   • DStatic application security testing (SAST)
   Reveal Solution Discussion Select an answer first