Managing Application Security GSLC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is an example of an application security metric?

   • AThe color scheme of the application interface
   • BThe name of the security team lead
   • CThe number of servers in the data center
   • DNumber of vulnerabilities found per application release
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A project manager wants to ensure that security is considered throughout the development lifecycle of a new application, not just at the end. Which approach should be adopted?

   • AFocus only on implementing firewalls and intrusion detection systems.
   • BConduct a single security review just before the final release.
   • CRely on the security team to test the application after it is deployed.
   • DIntegrate security activities into every phase of the SDLC, from requirements to deployment.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security manager needs to report to the board on the effectiveness of the application security program. Which metric would provide the most meaningful insight into whether the program is reducing risk over time?

   • ATotal lines of code written by the development team.
   • BMean time to remediate (MTTR) for critical application vulnerabilities.
   • CNumber of open-source licenses in use.
   • DNumber of security training sessions delivered per quarter.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization's web application was compromised through a SQL injection vulnerability. The incident response team has contained the immediate threat. What is the next most important step in the recovery process?

   • APatch the application by fixing the vulnerable code and redeploying.
   • BNotify all customers of the breach immediately.
   • CIncrease logging and monitoring for future attacks.
   • DRestore the database from the most recent backup.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A software company uses many open source libraries in its products. A new critical vulnerability is announced in one of these libraries. The security manager needs to determine which products are affected and prioritize remediation. What is the first step the security manager should take?

   • AImmediately update the library in all products to the latest version
   • BDisable all open source components in production
   • CCreate a software bill of materials (SBOM) for all products
   • DNotify all customers of a potential breach
   Reveal Solution Discussion Select an answer first