Security Fundamentals Flashcards
7 cards from real CSA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security Fundamentals flashcards as text
Which ABAC action controls whether a user can see a property's value?
Answer: PropertyRead
The PropertyRead action in an access control policy controls visibility of specific property values.
What is the purpose of the ABAC Discover action?
Answer: It lets users know an instance exists, such as in search results, without full Read access
Discover controls whether users can learn that an instance exists, which is narrower than Read access.
A new access role should get all permissions of an existing role and add a few more. What is the best approach?
Answer: Create a role that sets the existing role as a dependency
Role dependencies let a role inherit permissions from another role, which reduces duplicate AROs.
An ARO uses an Access When rule in the Read instances cell, and the condition is false. What happens?
Answer: Read access is denied for that instance
When the Access When condition is false, the role does not grant that operation for that instance.
Which property type should you use to store a sensitive value so it is encrypted in the database?
Answer: TextEncrypted
TextEncrypted properties are stored encrypted and need cipher configuration to decrypt.
To protect a ruleset version from accidental changes once development is finished, what should you do?
Answer: Lock the ruleset version
Locking a ruleset version stops rules in that version from being changed or added.
An activity is configured with Allow invocation from browser. Why should this be enabled only when required?
Answer: It lets external HTTP requests run the activity, which increases the attack surface
Activities callable from the browser can be invoked directly by HTTP requests, so they need careful security review.