CCSP Cloud Application Security

Question 1

Which OWASP Top 10 vulnerability involves attackers manipulating SQL queries by injecting malicious input?

Accepted Answer

SQL Injection

Answer

SQL injection occurs when user-supplied input is incorporated into a SQL query without proper sanitization, allowing attackers to manipulate the database.

Question 2

What is the primary purpose of a Web Application Firewall (WAF) in cloud application security?

Accepted Answer

To filter and monitor HTTP traffic to protect web applications from common exploits

Answer

A WAF inspects HTTP/HTTPS requests and responses, blocking attacks such as SQL injection, XSS, and CSRF before they reach the application.

Question 3

In secure software development for cloud applications, what does SAST (Static Application Security Testing) analyze?

Accepted Answer

Source code or compiled binaries without executing the program

Answer

SAST tools analyze source code, bytecode, or binaries statically to identify security vulnerabilities early in the development lifecycle before the code runs.

Question 4

What is OAuth 2.0 primarily used for in cloud applications?

Accepted Answer

Delegated authorization, allowing applications to access resources on behalf of users without sharing credentials

Answer

OAuth 2.0 is an authorization framework that enables a third-party application to obtain limited access to a service on behalf of a user without exposing their password.

Question 5

Which secure development practice involves reviewing code written by another developer to identify security flaws before deployment?

Accepted Answer

Peer code review / security code review

Answer

Security-focused code review uses a second developer (or automated tool) to scrutinize code for vulnerabilities before it is merged or deployed.

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP - Certified Cloud Security Professional Exam Practice Test

CCSP Cloud Application Security