Interpret Security Scan Results GITLAB-CERTIFIED-GIT-ASSOCIATE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security scan identifies a high-severity vulnerability in a web application: a cross-site scripting (XSS) flaw in a search feature. The recommended remediation is to sanitize user input and encode output. What is the most effective way to implement this remediation?

   • ADisable the search feature until a fix is implemented.
   • BManually escape all user input in the search feature.
   • CAdd a firewall rule to block malicious requests.
   • DUse a security library that automatically sanitizes input and encodes output.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A security scan identifies two vulnerabilities: one is a critical-severity issue in an internet-facing service, and the other is a low-severity issue in an internal tool. According to prioritization best practices, which finding should be addressed first?

   • ABoth at the same time
   • BThe critical-severity issue in the internet-facing service
   • CThe low-severity issue in the internal tool
   • DNeither, because the scan is not authoritative
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security scan of a microservices application reports a high-severity vulnerability in a service that processes payment transactions, and a medium-severity vulnerability in an internal reporting service that is not exposed to the internet. The team has limited resources. Which vulnerability should be fixed first?

   • AThe payment service vulnerability, because it handles sensitive data and is externally accessible.
   • BThe reporting service vulnerability, because it is internal and could be exploited by insiders.
   • CBoth vulnerabilities at the same time, because all vulnerabilities must be fixed.
   • DThe reporting service vulnerability, because it is easier to fix and has lower severity.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security scan identifies a medium-severity vulnerability in a web application: a lack of security headers, such as Content-Security-Policy (CSP). The recommended remediation is to add the missing headers. What is the most effective way to implement this remediation?

   • AAdd the headers only to the login page, as it is the most sensitive.
   • BUse a client-side script to add the headers.
   • CIgnore the vulnerability because headers are not critical.
   • DConfigure the web server to include the security headers in all responses.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security scan identifies a high-severity vulnerability in a web application: an insecure deserialization flaw in a legacy component. The recommended remediation is to upgrade the component to a patched version. However, the upgrade requires a significant refactor of dependent code. What is the most appropriate immediate action?

   • AImmediately upgrade the component without testing, to fix the vulnerability quickly.
   • BDisable the legacy component entirely to eliminate the vulnerability.
   • CIgnore the vulnerability until the upgrade can be completed.
   • DImplement a temporary workaround, such as input validation, while planning the upgrade.
   Reveal Solution Discussion Select an answer first