Application and Proxy Monitoring GCTD Practice Questions (Page 10)

Questions 46–47

1. 46application · medium

   A development team is deploying a new microservice that uses structured logging to JSON. The security team wants to monitor for SQL injection attempts in the application logs. What is the most effective approach?

   • AEnable the proxy to log all request bodies and search for SQL keywords in the proxy logs.
   • BParse the JSON logs to extract the query parameters and look for SQL keywords or patterns.
   • CUse the application's built-in error logs to look for database errors.
   • DSet up a network tap to capture all traffic to the database and analyze for SQL commands.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   How does correlating application and proxy data enhance threat detection?

   • AIt provides a more complete picture of an attack by linking user actions in the application with network-level proxy logs.
   • BIt reduces the need for any other security monitoring tools.
   • CIt ensures that proxy logs are stored in the same format as application logs.
   • DIt automatically patches vulnerabilities in the application.
   Reveal Solution Discussion Select an answer first