Securing Serverless Functions GPCS Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A developer is writing an AWS Lambda function that receives JSON input from an API Gateway endpoint and stores it in an S3 bucket. The function also returns a confirmation message that includes part of the input. What should the developer do to prevent injection attacks and data corruption?

   • ABase64-encode the entire input before storing it and return the encoded string as the confirmation message.
   • BUse a SQL database instead of S3 to store the input so that the database engine automatically sanitizes the data.
   • CValidate the JSON schema and type-check all fields, and encode the output before returning it to the caller.
   • DDisable the function's ability to return any part of the input to the caller.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the first step in a vulnerability management process for serverless functions?

   • ADeleting the function to eliminate the vulnerability
   • BIdentifying vulnerabilities in the function code and dependencies
   • CPatching the function immediately without testing
   • DReporting the vulnerability to the cloud provider
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company is migrating a legacy application to AWS Lambda. The application uses a database with a username and password. The security team mandates that the credentials must be rotated every 30 days and that the function must not have any hardcoded secrets. The team is considering using AWS Secrets Manager. What additional configuration is required to ensure the function always uses the current credentials?

   • AStore the secret in an environment variable and update it manually every 30 days.
   • BUse the function's IAM role to access the database directly without any credentials.
   • CEmbed the secret in the function's deployment package and update the package every time the secret rotates.
   • DConfigure the function to retrieve the secret from Secrets Manager at the start of each invocation and handle rotation by caching the secret for only a short period.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Why is it important to set an appropriate timeout value for a serverless function?

   • ATo ensure the function runs indefinitely until it completes
   • BTo allow the function to process more events concurrently
   • CTo ensure the function can access external APIs without authentication
   • DTo prevent the function from running longer than necessary, reducing cost and resource abuse
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Why is input validation critical for serverless functions that process user-supplied data?

   • ATo prevent injection attacks and data corruption
   • BTo allow the function to accept any type of data
   • CTo ensure the function runs faster
   • DTo reduce the function's memory usage
   Reveal Solution Discussion Select an answer first