Week 2 CAS 005 day 1

Which cloud model gives the customer the most responsibility?

A new app integrates 3rd-party authentication. What allows for federation for business users?

A healthcare provider must classify patient records. What method supports this best?

What tool is best for validating infrastructure configuration against baselines?

In cloud architecture, what mitigates insecure storage configuration exposure?

Which method ensures container images used in CI/CD are trusted and untampered?

An financial organisation implements tagging across data stores. What benefit does this provide?

Which technology protects cloud assets, gives workload visibility and policy enforcement?

An enterprise uses WAFs and IPS at different layers. What model is being applied?

What control is most effective at minimizing attack surface in legacy applications?

To protect against software supply chain attacks, what practice is most effective?

In a federated SSO system, which entity provides identity assertions to service providers?

What is the capital of Italy

In Zero Trust, what restricts access to trusted users and devices ?

An e-commerce firm uses a CDN. What is a primary benefit for security?

Which component in a Zero Trust model controls access based on user and context?

What secure development technique identifies vulnerabilities before applications are compiled?

What is the capital city of Belgium

To detect threats in hybrid environments, which mechanism provides real-time data?

What secure architecture element helps isolate workloads by user role?

A development team is required to verify open-source library safety. What helps most?

Which design principle aligns with Zero Trust for remote users cloud resource access?

In PKI, which mechanism checks revocation status of a certificate in real-time?

What metric allows a security team to prioritize remediation actions

What is a used by a government department to verify file integrity?

What element of RASP distinguishes it from traditional runtime security?

Which SDLC phase is best for integrating threat modeling into the process?

What does an organization use to enforce least privilege during provisioning?

What is published by MITRE to allow security teams to remediate vulnerabilities

What standard allows for configuration baselines to be verified by a security teams

What is used to encrypt a laptop hard-drive

What Asymmetric algorithm supports Forward Secrecy

An org is implementing Zero Trust. Which concept is critical to limit internal lateral movement?

What king of fish will I catch in the river Tay in Scotland?

An organization uses dynamic scaling with cloud VMs. What architectural design is most relevant?

During a penetration test, multiple web services lack certificate validation. What control helps?

How can an organization reduce the risk of expired certificates in large-scale systems?

A company wants to prevent unauthorized access to cloud APIs. Which method is most effective?