Certification753 problems· 15 reviewed

정보보안기사

753 incident response problems that help with 정보보안기사 prep.

All problems (753)

SECURITY-1589A CrowdSec parser fix lands and one scenario still never firesOne CrowdSec scenario still misses after parser fixes.SecurityIntermediate8 minPro SECURITY-1598A PAM radius fallback is fixed and one host still denies usersOne host still denies users after PAM radius fallback fixes.SecurityAdvanced8 minPro SECURITY-1564A secret rotation is complete and one workload still reads the old valueOne workload keeps reading the old secret after a successful rotation.SecurityIntermediate8 minPro SECURITY-1594An External Secrets fix lands and one app still gets the old payloadOne app still gets the old payload after an External Secrets fix.SecurityIntermediate8 minPro SECURITY-1584An External Secrets merge order is fixed and one app still sees the old payloadOne app still sees the old secret payload after merge-order fixes.SecurityIntermediate8 minPro SECURITY-1574An External Secrets merge rule is corrected and one workload still builds the old payloadOne workload still assembles the old secret payload after merge-rule cleanup.SecurityIntermediate8 minPro SECURITY-1609A CrowdSec parser fix is correct and one decision stream still misses attacksOne decision stream still misses attacks after a CrowdSec parser fix.SecurityAdvanced9 minPro SECURITY-1606A JWKS endpoint fix is correct and one verifier still rejects tokensOne verifier still rejects tokens after a JWKS endpoint fix.SecurityAdvanced9 minPro SECURITY-1588A RADIUS failover works and one PAM stack still denies valid usersOne PAM stack still denies valid users during RADIUS failover.SecurityAdvanced9 minPro SECURITY-1554A secret rotation completes and one workload still uses the retired valueOne workload keeps using a retired secret after rotation across stores.SecurityIntermediate9 minPro SECURITY-1518A SIEM parser accepts the new firewall field and correlation still breaksThreat correlation breaks only for one firewall feed after a vendor format update.SecurityIntermediate9 minPro SECURITY-1528A SIEM parser accepts the new firewall field and correlation still breaksThreat correlation breaks only for one firewall feed after a format update.SecurityIntermediate9 minPro SECURITY-1508A SIEM parser accepts the new firewall field and threat correlation still breaksThreat correlation breaks only for one firewall feed after a vendor format update.SecurityIntermediate9 minPro SECURITY-1498A SIEM pipeline parses the new firewall field and threat correlation still breaksThreat correlation breaks only for one firewall feed after a vendor format update added a new zone field.SecurityIntermediate9 minPro SECURITY-1468A token introspection cache keeps denying a restored service accountOne service account remains unauthorized after an emergency rollback restored the client in the IdP.SecurityIntermediate9 minPro SECURITY-1478A token introspection rollback restores the client and one service still denies requestsRequests continue failing after app restarts because the negative introspection cache lives in a separate sidecar.SecurityIntermediate9 minPro SECURITY-1604An External Secrets template is fixed and one pod still renders the old credentialOne pod still renders the old credential after an External Secrets fix.SecurityAdvanced9 minPro SECURITY-1447A fail2ban jail keeps banning the proxy instead of the clientAbuse continues while fail2ban reports bans against the reverse proxy after a structured logging migration.SecurityIntermediate10 minPro SECURITY-1407A fail2ban jail keeps unbanning abusive clientsA fail2ban jail keeps unbanning abusive clients focuses on abuse-protection and asks the reader to isolate the key signal in ubuntu. Abuse controls tied to log scraping can fail silently when logging format changes but the jail...SecurityIntermediate10 minPro SECURITY-1397A fail2ban jail matches the right event and bans nothingA fail2ban jail matches the right event and bans nothing focuses on incident-response and asks the reader to isolate the key signal in Linux. Security automation often breaks on log-shape migrations that preserve human reada...SecurityIntermediate10 minPro