Question 130 A serverless function accepts attacker-controlled callback URLs and accesses internal endpoints. Which design flaw needs mitigation? Constrain outbound destinations and validate URLs to prevent server-side request forgery Replace or isolate the device and require unique managed credentials in future acquisitions Fix tenant isolation for shared virtual resources and test cross-session leakage Validate operational compatibility and use segmented compensating protections if endpoint agents are unsafe Explanation Correct Answer A:Untrusted redirects into privileged networks can bypass intended service boundaries. Incorrect Answers B:A shared immutable secret compromises the whole fleet when one copy leaks; although this helps when an IoT gateway has a hard-coded universal password that cannot be rotated, it leaves the current case's need to constrain outbound destinations and validate URLs to prevent server-side request forgery unresolved. C:The other scenario states that a virtual desktop exposes clipboard contents between isolated customer sessions, where virtualization boundaries must prevent one tenant seeing another's private data; by contrast, the present case requires constrain outbound destinations and validate URLs to prevent server-side request forgery. D:For the separate situation in which a control-system vendor proposes installing ordinary endpoint antivirus on an untested real-time controller, availability and safety constraints can make standard enterprise endpoint agents unsuitable for OT; here the stated problem requires constrain outbound destinations and validate URLs to prevent server-side request forgery.
Question 131 A virtual desktop exposes clipboard contents between isolated customer sessions. What security property is affected? Fix tenant isolation for shared virtual resources and test cross-session leakage Separate workload identities and restrict service-to-service and orchestration permissions Restrict storage access using appropriate identity and network controls verified against requirements Validate operational compatibility and use segmented compensating protections if endpoint agents are unsafe Explanation Correct Answer A:Virtualization boundaries must prevent one tenant seeing another's private data. Incorrect Answers B:A shared privileged identity turns a single container compromise into broad lateral access; although this helps when a microservices platform shares one cluster-wide administrator identity across every pod, it leaves the current case's need to fix tenant isolation for shared virtual resources and test cross-session leakage unresolved. C:Application-private compute does not automatically protect the accessible data service; it is relevant where a cloud data lake exposes its object endpoint publicly despite private application processing, whereas the current facts require fix tenant isolation for shared virtual resources and test cross-session leakage to address the stated problem. D:This option fits a different fact pattern where a control-system vendor proposes installing ordinary endpoint antivirus on an untested real-time controller: availability and safety constraints can make standard enterprise endpoint agents unsuitable for OT; the current case instead requires fix tenant isolation for shared virtual resources and test cross-session leakage.
Question 132 A bank uses one symmetric encryption key to protect and exchange records with hundreds of partners. What key-management issue should drive redesign? Use a certificate chain anchored in appropriately trusted public certification authorities Use encryption for reversible protected data and reserve hashes for appropriate integrity functions Introduce controlled per-party or per-session key distribution with rotation and separation Revoke affected certificates and reissue through a trusted chain after key-compromise analysis Explanation Correct Answer C:A single shared key amplifies compromise and complicates attribution and revocation. Incorrect Answers A:Public TLS server authentication depends on validated bindings between identity and public keys; it is relevant where a public website must prove its server identity to browsers over TLS, whereas the current facts require introduce controlled per-party or per-session key distribution with rotation and separation to address the stated problem. B:For the separate situation in which an organization plans to use hashing alone as a confidentiality mechanism for stored customer records, hash functions are one-way digests and cannot provide readable encrypted storage; here the stated problem requires introduce controlled per-party or per-session key distribution with rotation and separation. D:A valid-looking certificate cannot be trusted after its signing chain is compromised; it is relevant where a certificate authority is retiring an intermediate that has been compromised, whereas the current facts require introduce controlled per-party or per-session key distribution with rotation and separation to address the stated problem.
Question 133 A public website must prove its server identity to browsers over TLS. Which trust mechanism is central? Use a certificate chain anchored in appropriately trusted public certification authorities Use encryption for reversible protected data and reserve hashes for appropriate integrity functions Use a managed HSM-backed signing capability with nonexportable private keys Introduce controlled per-party or per-session key distribution with rotation and separation Explanation Correct Answer A:Public TLS server authentication depends on validated bindings between identity and public keys. Incorrect Answers B:Hash functions are one-way digests and cannot provide readable encrypted storage; this responds to the different circumstance in which an organization plans to use hashing alone as a confidentiality mechanism for stored customer records, while the current case states that a public website must prove its server identity to browsers over TLS, calling for use a certificate chain anchored in appropriately trusted public certification authorities. C:The other scenario states that a signing service needs private keys that software operators cannot export, where protected key operations limit theft paths and support controlled cryptographic custody; by contrast, the present case requires use a certificate chain anchored in appropriately trusted public certification authorities. D:A single shared key amplifies compromise and complicates attribution and revocation; this responds to the different circumstance in which a bank uses one symmetric encryption key to protect and exchange records with hundreds of partners, while the current case states that a public website must prove its server identity to browsers over TLS, calling for use a certificate chain anchored in appropriately trusted public certification authorities.
Question 134 An organization plans to use hashing alone as a confidentiality mechanism for stored customer records. What correction is needed? Use a managed HSM-backed signing capability with nonexportable private keys Use a certificate chain anchored in appropriately trusted public certification authorities Use encryption for reversible protected data and reserve hashes for appropriate integrity functions Revoke affected certificates and reissue through a trusted chain after key-compromise analysis Explanation Correct Answer C:Hash functions are one-way digests and cannot provide readable encrypted storage. Incorrect Answers A:For the separate situation in which a signing service needs private keys that software operators cannot export, protected key operations limit theft paths and support controlled cryptographic custody; here the stated problem requires use encryption for reversible protected data and reserve hashes for appropriate integrity functions. B:Public TLS server authentication depends on validated bindings between identity and public keys; it is relevant where a public website must prove its server identity to browsers over TLS, whereas the current facts require use encryption for reversible protected data and reserve hashes for appropriate integrity functions to address the stated problem. D:The other scenario states that a certificate authority is retiring an intermediate that has been compromised, where a valid-looking certificate cannot be trusted after its signing chain is compromised; by contrast, the present case requires use encryption for reversible protected data and reserve hashes for appropriate integrity functions.
Question 135 A signing service needs private keys that software operators cannot export. What technology best fits? Introduce controlled per-party or per-session key distribution with rotation and separation Use a managed HSM-backed signing capability with nonexportable private keys Revoke affected certificates and reissue through a trusted chain after key-compromise analysis Use a certificate chain anchored in appropriately trusted public certification authorities Explanation Correct Answer B:Protected key operations limit theft paths and support controlled cryptographic custody. Incorrect Answers A:A single shared key amplifies compromise and complicates attribution and revocation; this responds to the different circumstance in which a bank uses one symmetric encryption key to protect and exchange records with hundreds of partners, while the current case states that a signing service needs private keys that software operators cannot export, calling for use a managed HSM-backed signing capability with nonexportable private keys. C:The other scenario states that a certificate authority is retiring an intermediate that has been compromised, where a valid-looking certificate cannot be trusted after its signing chain is compromised; by contrast, the present case requires use a managed HSM-backed signing capability with nonexportable private keys. D:The other scenario states that a public website must prove its server identity to browsers over TLS, where public TLS server authentication depends on validated bindings between identity and public keys; by contrast, the present case requires use a managed HSM-backed signing capability with nonexportable private keys.
Question 136 A certificate authority is retiring an intermediate that has been compromised. What should responders prioritize? Revoke affected certificates and reissue through a trusted chain after key-compromise analysis Use encryption for reversible protected data and reserve hashes for appropriate integrity functions Use a managed HSM-backed signing capability with nonexportable private keys Introduce controlled per-party or per-session key distribution with rotation and separation Explanation Correct Answer A:A valid-looking certificate cannot be trusted after its signing chain is compromised. Incorrect Answers B:Hash functions are one-way digests and cannot provide readable encrypted storage; although this helps when an organization plans to use hashing alone as a confidentiality mechanism for stored customer records, it leaves the current case's need to revoke affected certificates and reissue through a trusted chain after key-compromise analysis unresolved. C:Protected key operations limit theft paths and support controlled cryptographic custody; this responds to the different circumstance in which a signing service needs private keys that software operators cannot export, while the current case states that a certificate authority is retiring an intermediate that has been compromised, calling for revoke affected certificates and reissue through a trusted chain after key-compromise analysis. D:The other scenario states that a bank uses one symmetric encryption key to protect and exchange records with hundreds of partners, where a single shared key amplifies compromise and complicates attribution and revocation; by contrast, the present case requires revoke affected certificates and reissue through a trusted chain after key-compromise analysis.
Question 137 A web service verifies API HMACs using early-exit string comparison and response timing leaks matching prefix length. What attack class applies? Implement bounded attempts and appropriate throttling or lockout for online brute-force attempts Eliminate distinguishable decryption errors that enable padding-oracle or chosen-ciphertext exploitation Treat the observation as a timing side-channel and use constant-time verification Invalidate compromised sessions and strengthen replay-resistant session lifecycle controls Explanation Correct Answer C:Timing differences can disclose secret-dependent computations without directly breaking the cipher. Incorrect Answers A:Online guessing cost depends on enforced rate limits and account controls; this responds to the different circumstance in which an attacker can make repeated guesses against a poorly protected four-digit PIN, while the current case states that a web service verifies API HMACs using early-exit string comparison and response timing leaks matching prefix length, calling for treat the observation as a timing side-channel and use constant-time verification. B:For the separate situation in which an encryption library reveals different errors for invalid padding versus invalid authentication data, error oracles can reveal plaintext information from crafted ciphertext queries; here the stated problem requires treat the observation as a timing side-channel and use constant-time verification. D:A stolen bearer token may remain usable independently of the original password; this responds to the different circumstance in which a service accepts a stolen session token despite the user changing their password, while the current case states that a web service verifies API HMACs using early-exit string comparison and response timing leaks matching prefix length, calling for treat the observation as a timing side-channel and use constant-time verification.
Question 138 An encryption library reveals different errors for invalid padding versus invalid authentication data. What risk is raised? Invalidate compromised sessions and strengthen replay-resistant session lifecycle controls Implement bounded attempts and appropriate throttling or lockout for online brute-force attempts Eliminate distinguishable decryption errors that enable padding-oracle or chosen-ciphertext exploitation Apply side-channel resistance and physical protections to the cryptographic implementation Explanation Correct Answer C:Error oracles can reveal plaintext information from crafted ciphertext queries. Incorrect Answers A:A stolen bearer token may remain usable independently of the original password; it is relevant where a service accepts a stolen session token despite the user changing their password, whereas the current facts require eliminate distinguishable decryption errors that enable padding-oracle or chosen-ciphertext exploitation to address the stated problem. B:This option fits a different fact pattern where an attacker can make repeated guesses against a poorly protected four-digit PIN: online guessing cost depends on enforced rate limits and account controls; the current case instead requires eliminate distinguishable decryption errors that enable padding-oracle or chosen-ciphertext exploitation. D:For the separate situation in which a hardware attacker measures power use during protected private-key operations, power analysis can expose sensitive intermediate states despite mathematically sound algorithms; here the stated problem requires eliminate distinguishable decryption errors that enable padding-oracle or chosen-ciphertext exploitation.
Question 139 An attacker can make repeated guesses against a poorly protected four-digit PIN. What control most directly impedes this attack? Implement bounded attempts and appropriate throttling or lockout for online brute-force attempts Invalidate compromised sessions and strengthen replay-resistant session lifecycle controls Apply side-channel resistance and physical protections to the cryptographic implementation Treat the observation as a timing side-channel and use constant-time verification Explanation Correct Answer A:Online guessing cost depends on enforced rate limits and account controls. Incorrect Answers B:A stolen bearer token may remain usable independently of the original password; this responds to the different circumstance in which a service accepts a stolen session token despite the user changing their password, while the current case states that an attacker can make repeated guesses against a poorly protected four-digit PIN, calling for implement bounded attempts and appropriate throttling or lockout for online brute-force attempts. C:Power analysis can expose sensitive intermediate states despite mathematically sound algorithms; this responds to the different circumstance in which a hardware attacker measures power use during protected private-key operations, while the current case states that an attacker can make repeated guesses against a poorly protected four-digit PIN, calling for implement bounded attempts and appropriate throttling or lockout for online brute-force attempts. D:Timing differences can disclose secret-dependent computations without directly breaking the cipher; although this helps when a web service verifies API HMACs using early-exit string comparison and response timing leaks matching prefix length, it leaves the current case's need to implement bounded attempts and appropriate throttling or lockout for online brute-force attempts unresolved.
Question 140 A hardware attacker measures power use during protected private-key operations. What threat should architects assess? Treat the observation as a timing side-channel and use constant-time verification Invalidate compromised sessions and strengthen replay-resistant session lifecycle controls Apply side-channel resistance and physical protections to the cryptographic implementation Eliminate distinguishable decryption errors that enable padding-oracle or chosen-ciphertext exploitation Explanation Correct Answer C:Power analysis can expose sensitive intermediate states despite mathematically sound algorithms. Incorrect Answers A:Timing differences can disclose secret-dependent computations without directly breaking the cipher; although this helps when a web service verifies API HMACs using early-exit string comparison and response timing leaks matching prefix length, it leaves the current case's need to apply side-channel resistance and physical protections to the cryptographic implementation unresolved. B:A stolen bearer token may remain usable independently of the original password; it is relevant where a service accepts a stolen session token despite the user changing their password, whereas the current facts require apply side-channel resistance and physical protections to the cryptographic implementation to address the stated problem. D:Error oracles can reveal plaintext information from crafted ciphertext queries; although this helps when an encryption library reveals different errors for invalid padding versus invalid authentication data, it leaves the current case's need to apply side-channel resistance and physical protections to the cryptographic implementation unresolved.
