5.2 Identify and Describe Application Security Use Cases CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is deploying a web application that allows users to upload files. The security team wants to prevent malicious file uploads that could compromise the server. Which control should they implement?

   • AEnable network security groups (NSGs) on the web server.
   • BValidate file types and scan uploaded files for malware.
   • CUse a content delivery network (CDN) to cache uploaded files.
   • DUse a web application firewall (WAF) to block upload requests.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is developing a mobile app that uses a cloud-based backend. The security team wants to ensure that the app's API is not abused by bots and that user credentials are not compromised. Which combination of controls should they implement?

   • AEnable network security groups (NSGs) on the backend subnet.
   • BUse a web application firewall (WAF) to block malicious IPs.
   • CUse a virtual private network (VPN) for all API traffic.
   • DImplement rate limiting on the API and use multi-factor authentication (MFA) for user accounts.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A cloud security team wants to implement a use case that verifies that a containerized application is free from known vulnerabilities before it is deployed to production. Which application security use case does this scenario describe?

   • ARuntime threat detection
   • BSecure software development lifecycle (SSDLC) integration
   • CData loss prevention (DLP) for sensitive data
   • DIdentity and access management (IAM) for the application
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is deploying a web application that uses a cloud database. The security team wants to ensure that the database is not exposed to the internet and that only the application can access it. Which control should they implement?

   • AUse a web application firewall (WAF) in front of the database.
   • BUse a virtual private network (VPN) for all database connections.
   • CEnable encryption on the database.
   • DPlace the database in a private subnet and configure security groups to allow only the application's IP/security group.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is migrating a legacy application to the cloud. The application has a known vulnerability that cannot be patched immediately. The security team wants to reduce the risk of exploitation while the patch is developed. Which approach should they take?

   • AUse network security groups (NSGs) to block all inbound traffic.
   • BIncrease the logging level to detect exploitation attempts.
   • CImplement a web application firewall (WAF) with a virtual patch rule.
   • DDisable the application until the patch is ready.
   Reveal Solution Discussion Select an answer first