Online Access Free 300-745 Exam Questions

An employee of a pharmaceutical company accidentally checked in code that contains AWS secret keys to a public GitHub repository, which exposes production resources to attackers.
Which mitigation strategy must a security engineer recommend to prevent future reoccurrence?

• A.Implement a more granular port security strategy.
• B.Implement a phishing education campaign.
• C.Add a web application firewall.
• D.Configure a SCM precommit hook.

A developer is building new API functions for a cloud-based application. Before writing the code, the developer wants to ensure that destructive actions, including deleting and updating data, are properly protected by access control identifying sensitive fields such as those that contain passwords or personally identifiable information. Which approach must be used to score the risks proactively?

• A.SBOM Generation
• B.Open API Specification Analysis
• C.CSPM
• D.SAST

Which two best practices align with incident response and compliance objectives? (Choose two.)

• A.Implement real-time monitoring
• B.Disable auditing to improve performance
• C.Use shared admin credentials
• D.Maintain immutable logs

Which tool must be used to prioritize incidents by a SOC?

• A.endpoint detection and response
• B.CloudWatch
• C.endpoint protection platform
• D.SIEM

A software development company relies on GitHub for managing the source code and is committed to maintaining application security. The company must ensure that known software vulnerabilities are not introduced to the application. The company needs a capability within GitHub that can analyze semantic versioning and flag any software components that pose security risks. Which GitHub feature must be used?

• A.Artifact attestations
• B.Depend-a-bot
• C.GitHub Actions
• D.Sealed boxes