Question 1

Gilbert, a web developer, uses a centralized web API to reduce complexity and increase the Integrity of updating and changing data. For this purpose, he uses a web service that uses HTTP methods such as PUT. POST. GET. and DELETE and can improve the overall performance, visibility, scalability, reliability, and portability of an application. What is the type of web-service API mentioned in the above scenario?

Options :

A : JSON-RPC

B : SOAP API

C : RESTful API

D : REST API

Answer: C

Question 2

Suppose your company has just passed a security risk assessment exercise. The results display that the risk of

the breach in the main company application is 50%. Security staff has taken some measures and

implemented the necessary controls. After that, another security risk assessment was performed showing that

risk has decreased to 10%. The risk threshold for the application is 20%. Which of the following risk decisions

will be the best for the project in terms of its successful continuation with the most business profit?

Options :

A : Accept the risk

B : Introduce more controls to bring risk to 0%

C : Mitigate the risk

D : Avoid the risk

Answer: A

Question 3

The configuration allows a wired or wireless network interface controller to pass all traffic it receives to the Central Processing Unit (CPU), rather than passing only the frames that the controller is intended to receive. Which of the following is being described?

Options :

A : Multi-cast mode

B : Promiscuous mode

C : WEM

D : Port forwarding

Answer: B

Question 4

Annie, a cloud security engineer, uses the Docker architecture to employ a client/server model in the application she is working on. She utilizes a component that can process API requests and handle various Docker objects, such as containers, volumes. Images, and networks. What is the component of the Docker architecture used by Annie in the above scenario?

Options :

A : Docker client

B : Docker objects

C : Docker daemon

D : Docker registries

Answer: C

Question 5

In the process of implementing a network vulnerability assessment strategy for a tech company, the security

analyst is confronted with the following scenarios:

1) A legacy application is discovered on the network, which no longer receives updates from the vendor.

2) Several systems in the network are found running outdated versions of web browsers prone to distributed

attacks.

3) The network firewall has been configured using default settings and passwords.

4) Certain TCP/IP protocols used in the organization are inherently insecure.

The security analyst decides to use vulnerability scanning software. Which of the following limitations of

vulnerability assessment should the analyst be most cautious about in this context?

Options :

A :

Vulnerability scanning software is limited in its ability to perform live tests on web applications to detect errors or unexpected behavior

B :

Vulnerability scanning software cannot define the impact of an identified vulnerability on different business operations

C : Vulnerability scanning software is limited in its ability to detect vulnerabilities at a given point in time

D :

Vulnerability scanning software is not immune to software engineering flaws that might lead to serious vulnerabilities being missed

Answer: D

Confidently Practice Online with Free 312-50v13 Exam Cram

Buying Options: