CASE App Security Engineer Secure Deployment 5

Question 1

Which practice best hardens a Docker container image for deploying a web application?

Accepted Answer

Use a minimal base image and run as a non-root user

Answer

Minimal images and non-root users reduce both the attack surface and the privileges available after a compromise.

Question 2

A Content-Security-Policy header with "script-src 'self'" mainly helps mitigate which attack?

Accepted Answer

Cross-site scripting

Answer

CSP restricts where scripts can load from, which blocks most injected and inline script attacks.

Question 3

An application is deployed with debug mode enabled in its framework configuration. What is the primary risk?

Accepted Answer

Exposure of internal details and possibly code execution through debug consoles

Answer

Debug modes can reveal configuration and stack details, and some interactive debuggers allow remote code execution.

Question 4

Which header setting prevents an application's pages from being framed by other sites to stop clickjacking?

Accepted Answer

X-Frame-Options: DENY

Answer

X-Frame-Options DENY (or CSP frame-ancestors 'none') blocks other origins from embedding the page in frames.

Question 5

Infrastructure-as-Code templates are scanned before deployment. What does this mainly detect?

Accepted Answer

Misconfigurations such as open security groups or unencrypted storage

Answer

IaC scanning catches insecure cloud and infrastructure settings before they are provisioned.

(CASE) Certified Application Security Engineer Practice Test