Securing Serverless Functions GPCS Practice Questions (Page 10)

Questions 46–48

1. 46foundation · easy

   Which of the following is an example of an event source for a serverless function?

   • AA developer's local IDE build
   • BA network firewall rule change
   • CA scheduled timer that invokes the function at a specified interval
   • DA virtual machine's operating system update
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A DevOps team is building a CI/CD pipeline for a serverless application on Google Cloud. The security team requires that vulnerabilities be identified before deployment. Which step should be integrated into the pipeline?

   • ADeploy the function first and then run a vulnerability scan against the live endpoint.
   • BRun a SAST scan only on the infrastructure-as-code templates, not on the function code.
   • CManually review the code once a month instead of automating scans in the pipeline.
   • DRun a static application security testing (SAST) scan on the function source code and a container/dependency scan on the build artifacts, failing the pipeline on critical findings.
   Reveal Solution Discussion Select an answer first
3. 48expert · hard

   An organization runs a public API on Azure Functions. They have implemented rate limiting at the API Management layer, but they are still seeing high execution counts and costs. The function is CPU-bound and each invocation takes about 2 seconds. The team wants to reduce the impact of a single client while maintaining responsiveness for legitimate users. What is the most effective additional control?

   • AMove the function to a Premium plan to get dedicated instances.
   • BIncrease the function app's memory allocation to speed up each invocation.
   • CSet a lower concurrency limit on the function app to cap the number of parallel executions.
   • DDisable the function app's logging to reduce overhead.
   Reveal Solution Discussion Select an answer first