CAS-005 DAY 4

To detect threats in hybrid environments, which mechanism provides real-time data?

What control is most effective at minimizing attack surface in legacy applications?

In Zero Trust, what supports automated decisions based on session attributes?

In PKI, which mechanism checks revocation status of a certificate in real-time?

Which design principle aligns with Zero Trust for cloud resource access?

What does an organization use to enforce least privilege during provisioning?

Which SDLC phase is best for integrating threat modeling into the process?

An org implements tagging across data stores. What benefit does this provide?

An e-commerce firm uses a CDN. What is a primary benefit for security?

To protect against software supply chain attacks, what practice is most effective?

What tool is best for validating infrastructure configuration against baselines?

What secure development technique identifies vulnerabilities before app execution?

How should an org secure API traffic between microservices?

In which city will all fish and chip shops agree to deep fry anything in batter?

In a federated SSO system, which entity provides identity assertions to service providers?

How can an org reduce risk of expired certs in large-scale systems?

Which component in a Zero Trust model controls access based on user and context?

What secure architecture element helps isolate workloads by user role?

An enterprise uses WAFs and IPS at different layers. What model is being applied?

An org uses dynamic scaling with cloud VMs. What architectural concern is most relevant?

A dev team is required to verify open-source library safety. What helps most?

During a penetration test, multiple web services lack certificate validation. What control helps?

An org is implementing Zero Trust. Which concept is critical to limit internal lateral movement?

What is the capital city of Spain

In cloud architecture, what mitigates insecure storage configuration exposure?

Which technology enables proactive cloud workload visibility and policy enforcement?

Which cloud model limits the customer's control over hardware-level protections?

A company wants to prevent unauthorized access to cloud APIs. Which method is most effective?

Which method ensures container images used in CI/CD are trusted and untampered?

A healthcare provider must classify patient records. What method supports this best?

A new app integrates 3rd-party authentication. Which risk must be addressed?

Whare are the famous Spanish steps?

What element of RASP distinguishes it from traditional runtime security?