Securing Serverless Functions GPCS Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the benefit of integrating static analysis into the CI/CD pipeline for serverless functions?

   • AIt automatically deploys the function to production
   • BIt encrypts the function's environment variables
   • CIt identifies potential security flaws in the code before deployment
   • DIt reduces the function's execution time
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A team is building a CI/CD pipeline for serverless functions. They want to automatically block deployment if a function has a known critical vulnerability in its dependencies. However, they also want to avoid blocking deployment for non-critical vulnerabilities that have no known exploit. What is the best approach?

   • AFail the build only for critical vulnerabilities, and ignore all other vulnerabilities.
   • BDo not use an SCA tool; instead, manually review dependencies before each release.
   • CFail the build on any vulnerability, regardless of severity or exploitability.
   • DConfigure the SCA tool to fail the build only for critical and high severity vulnerabilities that have a known exploit, and allow non-critical vulnerabilities to be reported as warnings.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which function configuration setting should be reviewed to prevent a serverless function from consuming excessive memory and incurring high costs?

   • ARuntime version
   • BFunction name
   • CMemory allocation
   • DRegion
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security incident occurred in a serverless function that processes payment transactions. The incident response team needs to collect forensic evidence. What is the most important consideration when collecting evidence from a serverless environment?

   • ARecover the function's memory contents from the last invocation using the provider's API.
   • BRequest the cloud provider to preserve the exact physical server that ran the function.
   • CCollect logs and execution traces from the function's logging service and any API gateway logs before they expire.
   • DTake a snapshot of the function's runtime environment and analyze it offline.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which data source is most valuable for incident response in a serverless environment?

   • AA memory dump of the function's container
   • BThe function's source code only
   • CA snapshot of the function's virtual machine
   • DDetailed execution logs and event traces
   Reveal Solution Discussion Select an answer first