nerdexam
CompTIA

CV0-003 · Question #798

A security analyst is investigating a recurring alert. The alert is reporting an insecure firewall configuration state after every cloud application deployment. The process of identifying the issue…

The correct answer is A. Validate the IaC code used during the deployment. The main reason is the applied access rules; so the IaC api call needs to be revisited and

Security

Question

A security analyst is investigating a recurring alert. The alert is reporting an insecure firewall configuration state after every cloud application deployment. The process of identifying the issue, requesting a fix, and waiting for the developers to manually patch the environment is being repeated multiple times. In an effort to identify the root issue, the following logs were collected:

Which of the following options will provide a permanent fix for the issue?

Exhibit

CV0-003 question #798 exhibit

Options

  • AValidate the IaC code used during the deployment.
  • BAvoid the use of a vault to store database passwords.
  • CRotate the access keys that were created during deployment.
  • DRecommend that the developers do not create multiple resources at once.

How the community answered

(31 responses)
  • A
    68% (21)
  • B
    6% (2)
  • C
    6% (2)
  • D
    19% (6)

Explanation

The main reason is the applied access rules; so the IaC api call needs to be revisited and

Topics

#IaC#firewall misconfiguration#DevSecOps#security automation

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice