5.1 Identify and Evaluate Application Security Posture Management (ASPM) Features and Functionality CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   How does ASPM evaluate the security posture of a manual business application?

   • ABy requiring the user to manually input a security score for the application
   • BBy automatically scanning the application's source code repository without any user input
   • CBy using the application's defined attributes and associating relevant security findings with it
   • DBy monitoring network traffic to the application in real time
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization has defined an SLA in ASPM that requires a 'response' to a high-severity issue within 8 hours and 'remediation' within 72 hours. The security team wants to ensure that the responsible developer is automatically notified when the 8-hour response window is about to be missed. What should they configure in ASPM?

   • AA new SLA with a 4-hour response time to provide a buffer.
   • BA manual process where the security team checks the SLA dashboard every hour.
   • CA notification rule or alert that triggers on SLA breach or near-breach conditions.
   • DA change to the issue severity to 'critical' so it triggers a different workflow.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has a legacy mainframe application that is used for payroll processing. The application is stable and only changes during scheduled quarterly updates. The security team is integrating this application into ASPM. What is the primary challenge ASPM will face when evaluating this application's security posture?

   • AThe application must be reclassified as a dynamic application to be monitored.
   • BASPM will need to rely on manual or less frequent data collection methods to assess its components.
   • CASPM will be unable to identify any vulnerabilities in a mainframe application.
   • DThe application changes too frequently for ASPM to keep up with.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which ASPM feature is used to monitor SLA compliance for issues?

   • AAn email notification sent only when an issue is resolved
   • BA firewall rule that blocks issues that are out of compliance
   • CA manual audit log that records when each issue was closed
   • DDashboards and reports that display SLA status for each issue
   Reveal Solution Discussion Select an answer first