White Hat Apprentice: From Lab to Professional Report Quiz

Quiz: Cloud and Modern Application Security

Pass mark: 70%. You can retry as many times as you need.

1 In the shared responsibility model for cloud services, who is responsible for the permissions and access settings configured in a customer's account? Single answer The cloud provider, entirely The customer The internet service provider of the customer Nobody, since the defaults are always secure

2 Which of the following are typical cloud misconfigurations? (several answers) Multiple answers possible A storage container readable by anyone on the internet by mistake Enabling audit logging for administrative actions Access keys committed in a source code repository Allow-everything permissions assigned to an application identity

3 A customer can read order 43 by changing the number in a request for their own order 42. Which weakness is this? Single answer Broken object-level authorization Missing HTTPS A slow server Excessive logging

4 Which practices improve the security of containers? (several answers) Multiple answers possible Run the application as a non-root user Mount the container engine's control socket into the application container Scan images for known vulnerabilities and rebuild them regularly Provide secrets at run time instead of writing them into the image

5 A team introduces vulnerability scanning in its pipeline. What is the best way to start without paralyzing developers? Single answer Block every release on any finding of any severity from day one Run scans only once a year before an audit Report first, tune the tools, then block only on clear high-severity findings with actionable fixes Ask developers to disable the scanner whenever it is noisy