Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

ISC2 CAP Exam - Topic 7 Question 82 Discussion

Actual exam question for ISC2's CAP exam

Question #: 82
Topic #: 7

[All CAP Questions]

Which of the following HTTP response header prevents the client from caching the HTTP response in the most secure manner?

ACache-Control: no-cache, no-store

BSecure-Cache: Enabled

CCache-Control: Private

DContent-Security-Policy: no-cache, no-store

Show Suggested Answer

Suggested Answer: A

by Raul at Apr 10, 2024, 06:22 AM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joanna

7 months ago

Surprised that people still confuse these headers!

upvoted 0 times

...

Ronny

8 months ago

Wait, I thought Content-Security-Policy was more important?

upvoted 0 times

...

Andra

8 months ago

No way, A is the most secure option!

upvoted 0 times

...

Dulce

8 months ago

I think A is overkill, Private should be enough.

upvoted 0 times

...

Margery

8 months ago

A is definitely the right choice for preventing caching.

upvoted 0 times

...

Ammie

9 months ago

I feel like "Cache-Control: Private" is not strong enough, but I can't recall the specifics of why that is.

upvoted 0 times

...

Willodean

9 months ago

I’m a bit confused about the difference between A and D. Does "Content-Security-Policy" really affect caching like that?

upvoted 0 times

...

Emily

9 months ago

I remember practicing a question similar to this, and I think "Cache-Control: no-cache, no-store" was the most secure option.

upvoted 0 times

...

Latonia

9 months ago

I think the answer might be A, but I’m not entirely sure if "no-cache" is enough to prevent caching completely.

upvoted 0 times

...

Verdell

9 months ago

Okay, I've got this. The most secure way to prevent caching is to use the "no-cache, no-store" values in the Cache-Control header. That's definitely the answer I'm going with.

upvoted 0 times

...

Sheron

9 months ago

Hmm, I'm a bit unsure about this one. I know the Cache-Control header is important for caching, but I'm not sure which specific value is the most secure. I'll have to think this through carefully.

upvoted 0 times

...

Mary

9 months ago

This looks like a tricky one, but I think the key is to focus on the most secure way to prevent caching. I'll need to review my notes on HTTP headers and caching policies.

upvoted 0 times

...

Omega

9 months ago

I'm a little confused by the options here. Is the "Secure-Cache: Enabled" header a real thing? I don't remember seeing that one before. I'll need to double-check my understanding of the standard HTTP headers.

upvoted 0 times

...

Mendy

9 months ago

Okay, let's see. Corba is an older technology, so that's probably not the right answer. Web sockets and message bus sound more modern, but I'm not sure if those are the specific Salesforce-Heroku integration methods. I'll have to go with my best guess on this one.

upvoted 0 times

...

Shannan

9 months ago

Hmm, I'm a bit confused on this one. The question mentions an Inter-Pod Network topology, but I'm not sure how that relates to the Cisco Nexus features listed. I'll need to review my notes on those features to determine the best option.

upvoted 0 times

...

Stephaine

10 months ago

Isn't WEM designed to optimize user environments? I thought it was just the WEM Infrastructure Service that was cloud-hosted.

upvoted 0 times

...

Herman

1 year ago

Wait, 'Secure-Cache'? Is that like the superhero version of caching? I'm chuckling just thinking about it. Definitely going with A.

upvoted 0 times

...

Santos

1 year ago

I'm always a fan of keeping things 'Private', but in this case, I think A is the way to go. Gotta love that 'no-cache, no-store' goodness.

upvoted 0 times

...

Judy

1 year ago

You know, I heard that option D is the new cool kid on the block. But I'm sticking with the classic A. Can't go wrong with that one.

upvoted 0 times

Letha

1 year ago

I prefer option A as well, it's reliable.

upvoted 0 times

...

Macy

1 year ago

I think option D is worth considering for extra security.

upvoted 0 times

...

Chanel

1 year ago

I agree, option A is a classic choice.

upvoted 0 times

...

...

Sommer

1 year ago

Hmm, I'm not too sure about that 'Secure-Cache' option. Sounds a bit sketchy to me. I'm going with A to be on the safe side.

upvoted 0 times

Willow

1 year ago

User 3: Yeah, I'm going with A too.

upvoted 0 times

...

Richelle

1 year ago

User 2: I think A is the safest option.

upvoted 0 times

...

Gennie

1 year ago

User 1: I agree, 'Secure-Cache' does sound sketchy.

upvoted 0 times

...

...

Brianne

1 year ago

I think option A is the most secure way to prevent caching. The 'no-cache, no-store' directive is pretty standard for ensuring maximum security.

upvoted 0 times

Mauricio

1 year ago

Yes, the 'no-cache, no-store' directive is definitely the way to go for maximum security.

upvoted 0 times

...

Naomi

1 year ago

I agree, option A is the most secure way to prevent caching.

upvoted 0 times

...

...

Desmond

1 year ago

I'm not sure, but I think D) Content-Security-Policy: no-cache, no-store could also prevent caching securely.

upvoted 0 times

...

Jonelle

1 year ago

I agree with Anglea, because setting Cache-Control to no-cache, no-store ensures that the client does not cache the response.

upvoted 0 times

...

Anglea

1 year ago

I think the answer is A) Cache-Control: no-cache, no-store.

upvoted 0 times

...