Reviewing Solution Security Quiz

What you'll be asked

1. Which of the following activities is the most fundamental step when validating the security of a new solution design?
2. When reviewing an API design for security, which of the following is a critical validation point to prevent unauthorized data exposure?
3. During a security review, you notice that a service uses hardcoded credentials in the configuration files. What is the standard recommendation for remediating this?
4. A solution design proposes storing sensitive user data in a database. Which validation approach provides the most robust security posture for this data at rest?
5. You are validating a microservices architecture. You identify that inter-service communication occurs over plaintext HTTP. Which security control is the most appropriate to mandate for this design?

Answers and explanations come after you submit.