5.2 Identify and Describe Application Security Use Cases CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   A security engineer is defining a use case for protecting a cloud-hosted web application that handles customer transactions. Which application security use case is most directly addressed by deploying a web application firewall (WAF) in front of the application?

   • AEncrypting data at rest in the application's database
   • BDetecting and blocking common web-based attacks such as SQL injection and cross-site scripting (XSS)
   • CEnsuring the application's virtual machines are patched with the latest security updates
   • DPreventing unauthorized access to the underlying cloud management console
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is deploying a containerized application on a Kubernetes cluster. The security team wants to ensure that containers run with the least privilege and that the container runtime is secure. Which set of controls should they implement?

   • ARun containers as non-root users and enable a security context that restricts capabilities.
   • BEnable network security groups (NSGs) on the Kubernetes nodes.
   • CUse a web application firewall (WAF) to protect the Kubernetes API server.
   • DUse a virtual private network (VPN) for all container traffic.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is deploying a web application that must handle unpredictable traffic spikes. The security team wants to protect the application from DDoS attacks while keeping costs predictable. The application is currently running on a fixed number of virtual machines. Which solution should they implement?

   • AUse a web application firewall (WAF) with rate limiting.
   • BIncrease the number of virtual machines permanently to handle peak traffic.
   • CPurchase a dedicated DDoS appliance and deploy it in the cloud.
   • DUse a cloud-based DDoS protection service and enable auto-scaling for the application tier.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A healthcare organization is migrating its patient portal to the cloud. The portal handles sensitive personal health information (PHI). The security team wants to ensure that only authorized users can access the portal and that all access is logged for audit purposes. Which solution should they implement?

   • ADeploy a virtual private network (VPN) for all users to access the portal.
   • BIntegrate an identity provider (IdP) for single sign-on (SSO) and enable detailed logging on the application.
   • CUse a web application firewall (WAF) to protect the portal from web attacks.
   • DEnable network security groups (NSGs) on the portal's subnet.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company is deploying a public-facing web application in the cloud. The security team wants to protect the application from distributed denial-of-service (DDoS) attacks and also ensure that users are not exposed to malicious content. Which solution should they implement?

   • AUse a service mesh to encrypt traffic between application components.
   • BDeploy a virtual private network (VPN) for all users.
   • CEnable network security groups (NSGs) on the application subnet.
   • DUse a content delivery network (CDN) with DDoS protection and a web application firewall (WAF).
   Reveal Solution Discussion Select an answer first