5.2 Explain Rule and Policy Deployment and Management CLOUD-SECURITY-ENGINEER Practice Questions (Page 6)

Questions 26–27

1. 26expert · hard

   An organization uses an AI-based policy advisor that recommends security guardrails. The advisor recommends a guardrail that would require all API requests to include a specific header. The security team wants to implement this guardrail, but they are concerned that some legacy clients may not send the header, causing service disruption. What is the best way to proceed?

   • ADeploy the guardrail immediately to production to enforce the policy.
   • BAsk the AI advisor to provide a different recommendation that is less disruptive.
   • CReview the recommendation, identify affected clients, and deploy the guardrail in a test environment before production.
   • DReject the recommendation because it is too risky.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A developer is writing code for a web application that accepts user input and queries a database. They want to prevent SQL injection attacks. Which coding practice should they use?

   • AEscape all user input before including it in SQL queries.
   • BUse parameterized queries or prepared statements.
   • CUse a stored procedure for all database access.
   • DValidate user input to only allow alphanumeric characters.
   Reveal Solution Discussion Select an answer first