67. A security team wants to work with the same organization's development team to ensure WAF policies are automatically created when applications are deployed. Which of the following concepts describes this capability?
Answer: A
IaC describes the capability for automatically creating WAF policies when applications are deployed.
Infrastructure as Code (IaC) is a practice that allows development and operations teams to manage and provision infrastructure through code, enabling the automatic creation of WAF policies alongside application deployment.
A) IaC
IaC (Infrastructure as Code) is the correct answer as it involves automating infrastructure management through code. This approach allows for the seamless integration of security policies, such as WAF configurations, into the deployment process, ensuring that security measures are consistently applied whenever applications are launched.
B) IoT
IoT (Internet of Things) refers to the network of physical devices connected to the internet, enabling them to collect and exchange data. While IoT is significant in discussions around connectivity and data exchange, it does not pertain to the automated management of security policies in software deployments, making this option incorrect.
C) IoC
IoC (Indicators of Compromise) is a term used in cybersecurity to refer to artifacts observed on a network or in operating system files that indicate a potential breach. Although IoC is important for threat detection, it does not relate to the automation of creating WAF policies during application deployment, thus rendering this option incorrect.
D) IaaS
IaaS (Infrastructure as a Service) provides virtualized computing resources over the internet. While IaaS offers the infrastructure needed for applications to run, it does not inherently include the automation of WAF policy creation, making this option not applicable to the question's context.
Conclusion
IaC is the definitive correct answer as it encompasses the concept of automating infrastructure processes, including the creation of WAF policies during application deployments. Other options such as IoT, IoC, and IaaS do not address the specific requirement of integrating security measures into the deployment workflow, which is the core concept being tested.