Exam CV0-003 topic 1 question 284 discussion

Actual exam question from CompTIA's CV0-003

Question #: 284
Topic #: 1

A security analyst is investigating a recurring alert. The alert is reporting an insecure firewall configuration state after every cloud application deployment. The process of identifying the issue, requesting a fix, and waiting for the developers to manually patch the environment is being repeated multiple times. In an effort to identify the root issue, the following logs were collected:

Which of the following options will provide a permanent fix for the issue?

A. Validate the IaC code used during the deployment.
B. Avoid the use of a vault to store database passwords.
C. Rotate the access keys that were created during deployment.
D. Recommend that the developers do not create multiple resources at once.

Show Suggested Answer

Suggested Answer: A 🗳️

by mattygster at Feb. 23, 2023, 9:30 p.m.

Comments

Submit Cancel

mattygster

Highly Voted 1 year, 5 months ago

Selected Answer: A

im leaning towards A. The main reason is the applied access rules; so the IaC api call needs to be revisited and validated.

upvoted 7 times

...

Pongsathorn

Most Recent 10 months, 4 weeks ago

Selected Answer: A

To provide a permanent fix for the issue, the security analyst should: A. Validate the IaC code used during the deployment. The logs indicate the deployment process, and the issue appears to be related to the deployment process or configuration. By validating the Infrastructure as Code (IaC) code used during the deployment, the security analyst can identify and rectify any insecure firewall configuration settings or other issues in the deployment process. This will help ensure that the deployments are carried out securely and avoid recurring insecure configuration alerts.

upvoted 3 times

...