5.1 Identify and Evaluate Application Security Posture Management (ASPM) Features and Functionality CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a key characteristic of a manual business application in ASPM?

   • AIt is always a legacy application that cannot be integrated with modern security tools
   • BIt is automatically discovered and updated by ASPM without user intervention
   • CIt is defined and registered by a user, and its security posture is evaluated based on that registration
   • DIt is an application that is only used internally and not exposed to the internet
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does ASPM help evaluate SLA compliance for security issues?

   • ABy automatically closing issues that exceed the SLA deadline
   • BBy sending a report to management only when all SLAs are met
   • CBy requiring manual entry of the remediation date for each issue
   • DBy tracking the time elapsed since an issue was identified and comparing it to the SLA deadline
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security administrator is configuring SLAs in ASPM. They want to ensure that all 'critical' issues are responded to within 1 hour and remediated within 24 hours. They also want to ensure that 'high' issues are responded to within 4 hours and remediated within 72 hours. What is the most efficient way to configure this?

   • ACreate four separate SLAs, one for each combination of severity and response/remediation time.
   • BCreate a single SLA for all issues with a 4-hour response and 72-hour remediation time.
   • CCreate two SLAs: one for 'critical' issues and one for 'high' issues, each with the appropriate response and remediation times.
   • DCreate a single SLA for all issues with a 1-hour response and 24-hour remediation time.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In ASPM, how are SLAs typically configured for different types of issues?

   • ABy assigning a unique SLA to each individual issue manually
   • BBy creating SLA policies that map issue severity to specific response and remediation times
   • CBy using a fixed SLA for all issues regardless of severity
   • DBy integrating with an external ticketing system that defines SLAs
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which scenario best describes a 'dynamic' business application in ASPM?

   • AASPM automatically identifies a new microservice when it is deployed to a Kubernetes cluster
   • BAn application is registered with a fixed set of attributes that never change
   • CA security analyst manually creates an application record in the ASPM console
   • DAn application is defined in a spreadsheet and imported into ASPM by an administrator
   Reveal Solution Discussion Select an answer first