6.5 Identify and Describe Troubleshooting Issues Related to Application Security Components (e.g., Proper Policy Configuration) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company's security team is troubleshooting why a new application is not being identified by the firewall. The application signature was updated, but the traffic logs still show 'not-applicable'. What should the team do to resolve this issue?

   • AContact the application vendor to request a signature update.
   • BChange the security policy to allow all traffic from the application's source IP.
   • CCreate a custom application signature for the new application.
   • DReboot the firewall to reload the signature database.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security administrator notices that a new application is not being identified by the firewall, and the traffic logs show 'not-applicable' for the application field. The administrator has already verified that the application signature update was installed. What should the administrator do next?

   • ACreate a security rule that allows all traffic from the application's source IP.
   • BContact the application vendor to request a signature update.
   • CReboot the firewall to reload the signature database.
   • DCheck if the application requires a custom signature because it is not in the vendor's database.
   Reveal Solution Discussion Select an answer first
4. 8foundation · medium

   A security administrator wants to apply a vulnerability protection profile to a security policy rule. Where is the profile attached?

   • AIn the 'Logging' tab of the security policy rule.
   • BIn the 'Application' tab of the security policy rule.
   • CIn the 'Source' tab of the security policy rule.
   • DIn the 'Actions' tab of the security policy rule.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security administrator is troubleshooting why a new application is not being identified by the firewall. The application signature was updated, but the traffic logs show 'not-applicable'. The administrator has verified that the signature update was installed and the content version is current. Which additional step should the administrator take to resolve the issue?

   • AContact the application vendor to request a signature update.
   • BChange the security policy to allow all traffic from the application's source IP.
   • CReboot the firewall to reload the signature database.
   • DCreate a custom application signature for the new application.
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   A firewall has two security rules: Rule 1 allows 'web-browsing' from the internal zone to the external zone, and Rule 2 denies 'facebook' from the internal zone to the external zone. If a user accesses Facebook, which rule will be matched first, and what will be the result?

   • ABoth rules will be evaluated, and the most restrictive action will be applied, resulting in denial.
   • BRule 1 will match first because it is listed first, and the traffic will be allowed.
   • CThe traffic will be denied because the deny rule is more specific than the allow rule.
   • DRule 2 will match first because it is more specific, and the traffic will be denied.
   Reveal Solution Discussion Select an answer first