CISA Information Systems Acquisition, Development and Implementation — All Questions With Answers

Refer to the exhibit.

SW1(config)# access-list 101 permit tcp any host 10.0.0.100 eq 443
SW1(config)# access-list 101 deny tcp any host 10.0.0.100 eq 80
SW1(config)# access-list 101 permit ip any any
SW1(config)# interface vlan 10
SW1(config-if)# ip access-group 101 in

Refer to the exhibit.

ERROR: ORA-00001: unique constraint (HR.EMP_EMAIL_UK) violated
INSERT INTO employees (employee_id, email) VALUES (101, 'john.doe@example.com');

Refer to the exhibit.

{
  "version": "2.0",
  "routeSelection": "lowest-cost",
  "rules": [
    {
      "action": "forward",
      "match": {
        "sourceIp": "10.0.1.0/24",
        "destinationPort": 8080
      },
      "target": "backend-pool-1"
    },
    {
      "action": "forward",
      "match": {
        "sourceIp": "10.0.2.0/24",
        "destinationPort": 80
      },
      "target": "backend-pool-2"
    }
  ]
}

Refer to the exhibit.

```
Error: ORA-00001: unique constraint (FIN.UK_ACCT_TRANS_REF) violated
INSERT INTO ACCT_TRANS (TRANS_ID, REF_NUM, AMOUNT, DATE) VALUES (?, ?, ?, ?)
Call stack:
  - com.finance.service.TransactionService.processPayment(TransactionService.java:145)
  - com.finance.batch.BatchJob.run(BatchJob.java:88)
```

Refer to the exhibit.

```
ERROR 2019-11-15 14:23:45,123 [main] com.example.App - Error processing record ID 1045
java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (USERS.UK_USERNAME) violated
	at com.example.dao.UserDao.insert(UserDao.java:45)
	... 8 more
```

Refer to the exhibit.

```
! Cisco ASA configuration snippet
access-list OUTSIDE_IN extended permit tcp any host 203.0.113.10 eq www
access-list OUTSIDE_IN extended permit tcp any host 203.0.113.10 eq https
access-list OUTSIDE_IN extended deny ip any any log
!
object network WEB_SERVER
 host 203.0.113.10
nat (inside,outside) source static any any destination static WEB_SERVER WEB_SERVER no-proxy-arp route-lookup
!
```

Refer to the exhibit.

Exhibit:
```
[ROUTER1] show version
Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.1(4)M6, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 27-Aug-13 23:32 by prod_rel_team
ROM: System Bootstrap, Version 15.0(1r)M14, RELEASE SOFTWARE (fc1)

Router uptime is 2 years, 3 months, 1 week, 4 days
System returned to ROM by power-on
System image file is "flash:c880data-universalk9-mz.151-4.M6.bin"
```

Refer to the exhibit.

Exhibit:
```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": "*",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::example-bucket/*"
    }
  ]
}
```

Refer to the exhibit.

Exhibit:
The following architecture description is for a financial transaction processing system:
- Web servers in DMZ handle user requests.
- Application servers process business logic.
- Database servers store transaction records.
- All traffic between tiers is encrypted usng TLS.
- Logs are collected centrally in a SIEM.
- A firewall separates the DMZ from internal network.
- Application servers can initiate outbound connections to the internet for updates.

Refer to the exhibit.

```
[ERROR] Deployment failed at step 3 of 5: Unable to connect to database 'DB_PROD'. Connection string: 'Server=prod-db.finance.contoso.com;Database=Finance;User Id=app_user;Password=*****;'
[WARN] Retry attempt 1: same error.
```

Refer to the exhibit.

```
{
  "UserName": "jdoe",
  "Role": "User",
  "Permissions": [
    {"Resource": "/finance/reports", "Access": "ReadOnly"},
    {"Resource": "/finance/transfers", "Access": "ReadOnly"}
  ]
}
```

Refer to the exhibit.

```
<VirtualHost *:80>
    DocumentRoot "/var/www/html"
    <Directory "/var/www/html">
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>
</VirtualHost>
```

Refer to the exhibit.

[WebApp]
BaseURL = https://app.example.com
AuthMethod = Basic
SessionTimeout = 600
Encryption = SSL

Refer to the exhibit.

Change Request #: 1234
Description: Update interest calculation module
Impact: Low (only affects reports)
Approval: Pending
Scheduled Date: 2025-03-20

Refer to the exhibit.

The network architecture consists of:
- DMZ segment: web server (public IP), proxy server.
- Internal segment: application server, database server.
- Firewall rules: Allow HTTP/HTTPS from Internet to web server. Allow SQL traffic from web server to database server. Deny all else.

Refer to the exhibit.

[admin@fw1]# show rules
Rule 10: allow from 10.0.1.0/24 to 10.0.2.0/24 dst-port 3306
Rule 20: allow from 10.0.1.0/24 to any dst-port 443
Rule 30: allow from any to 10.0.2.0/24 dst-port 22

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::confidential/*",
      "Principal": {"AWS": "arn:aws:iam::123456789012:role/developer"}
    }
  ]
}

Refer to the exhibit.

Architecture description: The application is deployed across three tiers: web servers in DMZ, application servers in internal network, and database servers in a secured subnet. Traffic flows from web to app via HTTPS, and app to DB via port 3306.

Test Case ID: TC-101
Test Name: User Login
Step 1: Enter valid credentials
Expected Result: Redirect to dashboard
Actual Result: Error 'Invalid credentials' displayed
Status: Failed

Refer to the exhibit.

[2024-06-15 14:23:45] ERROR: Constraint violation on table 'ORDERS' - foreign key 'CUST_ID' referencing 'CUSTOMERS.CUST_ID' - record with CUST_ID = 9999 not found in target.
[2024-06-15 14:24:10] WARNING: Data type mismatch for column 'AMOUNT' in table 'ORDERS' - source decimal(10,2), target integer - truncation may occur.
[2024-06-15 14:25:30] ERROR: Duplicate key value 'INV-1001' on table 'INVOICES' violates unique constraint.
[2024-06-15 14:26:00] INFO: Rollback segment 'RBS1' is growing rapidly - check for long-running transactions.