Week 2 CAS 005 day 1

In PKI, which mechanism checks revocation status of a certificate in real-time?

What Asymmetric algorithm supports Forward Secrecy

In cloud architecture, what mitigates insecure storage configuration exposure?

What is published by MITRE to allow security teams to remediate vulnerabilities

In a federated SSO system, which entity provides identity assertions to service providers?

An financial organisation implements tagging across data stores. What benefit does this provide?

What element of RASP distinguishes it from traditional runtime security?

What does an organization use to enforce least privilege during provisioning?

An organization uses dynamic scaling with cloud VMs. What architectural design is most relevant?

Which SDLC phase is best for integrating threat modeling into the process?

What secure development technique identifies vulnerabilities before applications are compiled?

What metric allows a security team to prioritize remediation actions

What control is most effective at minimizing attack surface in legacy applications?

What standard allows for configuration baselines to be verified by a security teams

Which cloud model gives the customer the most responsibility?

Which component in a Zero Trust model controls access based on user and context?

To protect against software supply chain attacks, what practice is most effective?

What is a used by a government department to verify file integrity?

What is used to encrypt a laptop hard-drive

How can an organization reduce the risk of expired certificates in large-scale systems?

A new app integrates 3rd-party authentication. What allows for federation for business users?

In Zero Trust, what restricts access to trusted users and devices ?

What king of fish will I catch in the river Tay in Scotland?

During a penetration test, multiple web services lack certificate validation. What control helps?

What secure architecture element helps isolate workloads by user role?

Which design principle aligns with Zero Trust for remote users cloud resource access?

An enterprise uses WAFs and IPS at different layers. What model is being applied?

A development team is required to verify open-source library safety. What helps most?

What is the capital of Italy

What tool is best for validating infrastructure configuration against baselines?

An e-commerce firm uses a CDN. What is a primary benefit for security?

Which technology protects cloud assets, gives workload visibility and policy enforcement?

To detect threats in hybrid environments, which mechanism provides real-time data?

A healthcare provider must classify patient records. What method supports this best?

A company wants to prevent unauthorized access to cloud APIs. Which method is most effective?

Which method ensures container images used in CI/CD are trusted and untampered?

An org is implementing Zero Trust. Which concept is critical to limit internal lateral movement?

What is the capital city of Belgium