5.2 Explain Rule and Policy Deployment and Management CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company manages security policies for multiple CI/CD pipelines across different teams. They recently updated a policy to require a new security check, but the update caused a critical production pipeline to fail because the check was not compatible with the pipeline's build process. The team needs to restore service quickly while they fix the compatibility issue. What should they do?

   • ALeave the policy as is and manually approve the pipeline failures until the issue is fixed.
   • BDisable the security check in the pipeline permanently to prevent future failures.
   • CRoll back the policy to the previous version in the CI/CD system, then fix the compatibility issue and re-deploy the updated policy.
   • DRevert the code changes that triggered the new check, even though the code is compliant.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company wants to integrate security scanning into their CI/CD pipeline to catch vulnerabilities before deployment. They have a mix of Java and Python applications. Which approach is most effective?

   • AUse a single SAST tool that supports multiple languages and integrate it into the pipeline.
   • BUse separate SAST tools for each language and run them in parallel.
   • CRely on manual code reviews for security issues.
   • DUse only DAST tools to test the running applications.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which application security concern is specifically addressed by implementing proper authentication and session management controls?

   • ACross-site scripting
   • BSecurity logging and monitoring failures
   • CBroken authentication
   • DBroken access control
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary benefit of versioning security policies in a CI/CD environment?

   • AIt automatically updates all environments with the latest policy
   • BIt allows for easy rollback to a previous policy if a change causes issues
   • CIt eliminates the need for testing policy changes
   • DIt prevents any unauthorized changes to policies
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company enforces a policy that all code merged to the main branch must pass a static application security test (SAST) with zero high-severity findings. A developer submits a pull request that introduces a new feature and includes a high-severity SQL injection vulnerability. The CI/CD pipeline runs SAST and fails the build. What is the most appropriate next step for the developer to take?

   • AMerge the pull request anyway, since the vulnerability is only in a new feature and not in existing code.
   • BRequest an exception from the security team to bypass the SAST failure for this pull request.
   • CDisable the SAST step in the pipeline for this build and then merge the pull request.
   • DFix the SQL injection vulnerability in the code and push the changes to the same pull request, allowing the pipeline to re-run and pass.
   Reveal Solution Discussion Select an answer first