CJE Threat Detection & Incident Response 5

Question 1

Since Jenkins 2.326, what is true of agent-to-controller security?

Accepted Answer

It is always enabled and cannot be disabled

Answer

Agent-to-controller access control is always on, blocking compromised agents from abusing the controller.

Question 2

Where are in-process scripts awaiting admin review listed?

Accepted Answer

Manage Jenkins > In-process Script Approval

Answer

Script Security queues unapproved scripts and signatures in the In-process Script Approval page.

Question 3

An admin wants to find which threads are stuck while the controller seems compromised or overloaded. Which URL provides this?

Accepted Answer

/threadDump

Answer

/threadDump shows the stack traces of all controller threads for diagnosis.

Question 4

Which URL helps confirm the authentication and authorities that Jenkins assigns to the current session during an access investigation?

Accepted Answer

/whoAmI

Answer

/whoAmI displays the current user's name, authentication status, and granted authorities.

Question 5

A plugin has a critical, unfixed vulnerability being actively exploited. What is the quickest containment step if the plugin is not essential?

Accepted Answer

Disable or uninstall the plugin and restart Jenkins

Answer

Disabling or removing the vulnerable plugin removes the attack surface until a fix is released.

CJE - Certified Jenkins Engineer Practice Test