CCSP Cloud Application Security 2

Question 1

What is the primary risk of storing sensitive data in JWT (JSON Web Token) payloads?

Accepted Answer

JWT payloads are base64-encoded but not encrypted by default, making the data readable if intercepted

Answer

JWT payloads are only base64url-encoded, not encrypted, so anyone who intercepts or decodes the token can read the claims within it.

Question 2

In a microservices architecture, what is mutual TLS (mTLS) used for?

Accepted Answer

Authenticating both the client and server to each other in service-to-service communication

Answer

mTLS requires both communicating parties to present certificates, ensuring that each microservice can verify the identity of the other before exchanging data.

Question 3

Which threat modeling framework uses the mnemonic STRIDE to categorize threats?

Accepted Answer

Microsoft STRIDE model

Answer

Microsoft's STRIDE model categorizes threats as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.

Question 4

What is a major security concern with serverless (FaaS) applications in the cloud?

Accepted Answer

Insecure function triggers and over-permissive IAM roles granting excessive access

Answer

Serverless functions are often granted overly broad IAM permissions and may be triggered by insecure event sources, creating privilege escalation and injection risks.

Question 5

What is the purpose of an API gateway in cloud application security?

Accepted Answer

To enforce authentication, rate limiting, and traffic management for API calls

Answer

An API gateway centralizes authentication, authorization, rate limiting, and logging for all API traffic, acting as a single controlled entry point.

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP Cloud Application Security 2