5.1 Explain the Features and Functionality of Application Security CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the main goal of CI/CD posture management?

   • ATo speed up the build process by skipping security checks
   • BTo monitor the performance of production applications
   • CTo prevent insecure code from reaching production by enforcing security policies within the pipeline
   • DTo replace the need for manual code reviews entirely
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   An organization uses a GitOps approach to manage Kubernetes deployments. The security team wants to ensure that insecure configurations are not applied to the cluster. However, they also want to avoid blocking legitimate changes that are necessary for the business. What is the best approach?

   • AImplement a policy-as-code engine that evaluates proposed changes against security policies and requires approval for any violations before they are applied.
   • BHave a security engineer manually review every change before it is applied.
   • CBlock all changes that do not meet the security policies, without exception.
   • DAllow all changes to be applied and rely on runtime monitoring to detect misconfigurations.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services company has multiple development teams using different CI/CD tools (Jenkins, GitLab CI, and Azure DevOps) and a mix of on-premises and cloud-hosted applications. The security team wants a single view of application security risks across the entire software development lifecycle, from code commit to production deployment, with the ability to prioritize remediation based on business impact. What should the security team implement?

   • AA centralized Application Security Posture Management (ASPM) platform that integrates with all CI/CD tools and provides risk-based prioritization.
   • BA standalone SAST tool that each development team runs locally before committing code.
   • CA manual security review process performed by the security team at each release milestone.
   • DA vulnerability scanner that runs only in the production environment.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of secrets scanning?

   • ATo generate new secrets for application authentication
   • BTo encrypt secrets stored in a database
   • CTo detect hardcoded secrets like API keys and passwords in source code and configuration files
   • DTo monitor network traffic for credential theft
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization uses Terraform to manage cloud infrastructure. The security team wants to enforce a policy that prohibits the use of public IP addresses on virtual machines. What is the most effective way to enforce this policy?

   • ATrain developers to avoid using public IPs in their Terraform templates.
   • BUse a cloud security posture management (CSPM) tool to detect public IPs after deployment and alert the security team.
   • CManually review all Terraform templates before they are applied.
   • DAdd a policy-as-code check to the CI/CD pipeline that scans the Terraform templates and fails the build if a public IP is configured.
   Reveal Solution Discussion Select an answer first