CompTIA
CV0-003 · Question #798
CV0-003 Question #798: Real Exam Question with Answer & Explanation
The correct answer is A: Validate the IaC code used during the deployment.. The main reason is the applied access rules; so the IaC api call needs to be revisited and
Security
Question
A security analyst is investigating a recurring alert. The alert is reporting an insecure firewall configuration state after every cloud application deployment. The process of identifying the issue, requesting a fix, and waiting for the developers to manually patch the environment is being repeated multiple times. In an effort to identify the root issue, the following logs were collected: Which of the following options will provide a permanent fix for the issue?
Exhibit
Options
- AValidate the IaC code used during the deployment.
- BAvoid the use of a vault to store database passwords.
- CRotate the access keys that were created during deployment.
- DRecommend that the developers do not create multiple resources at once.
Explanation
The main reason is the applied access rules; so the IaC api call needs to be revisited and
Topics
#IaC#firewall misconfiguration#DevSecOps#security automation
Community Discussion
No community discussion yet for this question.