Incorporate Runtime Protection (e.g., Runtime Application Self Protection (RASP), Web Application Firewall (WAF), Address Space Layout Randomization (ASLR), Dynamic Execution Prevention) CSSLP Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   What is the main goal of Data Execution Prevention (DEP)?

   • ATo randomize the memory addresses of system libraries.
   • BTo prevent the execution of code from non-executable memory regions.
   • CTo monitor network traffic for malicious requests.
   • DTo encrypt data stored in memory to protect it from unauthorized access.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary function of a Web Application Firewall (WAF)?

   • ATo filter and monitor HTTP traffic to protect web applications from common attacks.
   • BTo encrypt all data transmitted between the client and the web server.
   • CTo manage user authentication and authorization for the web application.
   • DTo scan the application's source code for vulnerabilities during development.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A government agency deploys a public-facing web application and wants to protect it from OWASP Top 10 attacks. The agency has a strict requirement that all security controls must be managed by the agency's own staff, not the cloud provider. The application runs on a virtual machine in a cloud environment. What should the agency implement?

   • AInstall a RASP agent on the application VM and rely on its default configuration.
   • BEnable ASLR on the application VM to prevent web attacks.
   • CUse the cloud provider's managed WAF service (e.g., AWS WAF or Azure WAF).
   • DDeploy a self-managed WAF (e.g., ModSecurity with OWASP CRS) on a separate VM in front of the application.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A software company is adopting a DevOps model and wants to integrate runtime protection into its CI/CD pipeline for a containerized web application. The security team wants to ensure that WAF rules are tested before they reach production and that updates are rolled back automatically if they cause errors. What should the team implement?

   • ADeploy WAF rules directly to production and monitor the error rate for 24 hours.
   • BConfigure the WAF to block all traffic by default and manually review every request.
   • CUse a RASP agent in the container image and rely on its default rules without testing.
   • DAdd a staging environment with a WAF in detection mode, run automated tests, and promote the WAF configuration to production only after passing.
   Reveal Solution Discussion Select an answer first