CCSP Cloud Application Security

Question 1

Which OWASP Top 10 vulnerability involves attackers manipulating SQL queries by injecting malicious input?

Accepted Answer

SQL Injection

Answer

Broken Access Control

Answer

Security Misconfiguration

Answer

Insecure Deserialization

Question 2

What is the primary purpose of a Web Application Firewall (WAF) in cloud application security?

Accepted Answer

To filter and monitor HTTP traffic to protect web applications from common exploits

Answer

To encrypt traffic between the browser and server

Answer

To manage API authentication tokens

Answer

To cache web content for faster delivery

Question 3

In secure software development for cloud applications, what does SAST (Static Application Security Testing) analyze?

Accepted Answer

Source code or compiled binaries without executing the program

Answer

Running application behavior in production

Answer

Network traffic between microservices

Answer

Container image vulnerabilities

Question 4

What is OAuth 2.0 primarily used for in cloud applications?

Accepted Answer

Delegated authorization, allowing applications to access resources on behalf of users without sharing credentials

Answer

Encrypting data in transit

Answer

Multi-factor authentication

Answer

Digital certificate management

Question 5

Which secure development practice involves reviewing code written by another developer to identify security flaws before deployment?

Accepted Answer

Peer code review / security code review

Answer

Threat modeling

Answer

Fuzz testing

Answer

Regression testing

Question 6

What does the term 'defense in depth' mean when applied to cloud application security?

Accepted Answer

Applying multiple overlapping layers of security controls so that no single failure compromises the whole system

Answer

Using the deepest available encryption algorithm

Answer

Deeply scanning network packets

Answer

Running security tests after every code commit