Topic 1 Question 12
A customer deploys an application to App Engine and needs to check for Open Web Application Security Project (OWASP) vulnerabilities. Which service should be used to accomplish this?
Cloud Armor
Google Cloud Audit Logs
Web Security Scanner
Anomaly Detection
解説
Reference: https://cloud.google.com/security-scanner/
ユーザの投票
コメント(3)
Answer is (C). Web Security Scanner supports categories in the OWASP Top Ten, a document that ranks and provides remediation guidance for the top 10 most critical web application security risks, as determined by the Open Web Application Security Project (OWASP). https://cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview#detectors_and_compliance
👍 9Tabayashi2022/04/28This is called DAST (Dynamic Application Security Testing) through tools such as BurpSuite,ZAP in normal non-cloud deployments but the same has been done through web security scanner in GCP hence my answer is C
👍 2PopeyeTheSailorMan2022/07/24- 正解だと思う選択肢: C
The correct answer is C
👍 2GCP722022/08/26
シャッフルモード