CAP試験無料問題集「The SecOps Group Certified AppSec Practitioner 認定」

A. The docker-compose.yml file is a YAML file that contains the server logs and user session information including but not limited to admin users.

B. The docker-compose.yml file is a YAML file that contains the application source code.

C. The docker-compose.yml file is a YAML file that is used to define the services, networks, and volumes required for a Docker application. It specifies the configuration and dependencies for all containers in the application, including their network settings and container volumes.

D. The docker-compose.yml file is a YAML file that contains the configuration of load balancers and firewalls.

A. The application is vulnerable to username enumeration

B. None of the above

C. The application is vulnerable to brute-force attacks

D. The application does not enforce a strong password policy

A. The browser contains the public key of all known Certifying Authorities (CA) and based on that it is able to differentiate between a valid and an invalid TLS Certificate

B. The browser does not have any mechanism to validate the TLS Certificate

C. The browser contains both the public and private key of all known Certifying Authorities (CA) and based on that it is able to differentiate between a valid and an invalid TLS Certificate

D. The browser contains the private key of all known Certifying Authorities (CA) and based on that, it differentiates between a valid and an invalid TLS Certificate

A. To add a secret message to the password hash.

B. To defend against dictionary attacks or attacks against hashed passwords using a rainbow table.

C. To generate a long password hash that is difficult to crack.

D. To slow down the hash calculation process.

A. The application discloses the framework name and version

B. A cookie is set with HttpOnly and a Secure flag

C. The application reveals user-agent details

D. The application accepts insecure protocol