What does API (Application Programming Interfaces) security primarily involve?

Managing privacy and access control & identifying & remediation of attacks

What is a disadvantage of sandboxing in application security

It is less convenient for users to access resources such as camera or files

What is input validation

Ensuring input conforms to a set of defined rules

What is the primary purpose of Dynamic Application Security Testing (DAST) tools?

To test products and provide feedback on compliance and general security

What is the primary purpose of sanitisation in data input?

Checking, cleaning &filtering inputs of any unwanted characters & strings

What is penetration testing?

A simulated cyber attack to check for exploitable vulnerabilities

studbud

Secure Software Architecture

10 termsStudBud Administration41 plays

Year 12 Software Engineering

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
What does API (Application Programming Interfaces) security primarily involve?
Managing privacy and access control & identifying & remediation of attacks
Monitoring network traffic in an API looking for suspicious activity
Encrypting data for transmission
Encrypting data for secure transmission
2
What is a disadvantage of sandboxing in application security
It is less convenient for users to access resources such as camera or files
It allows applications to access system resources freely
It enhances user access to all system resources
It requires fewer resources as each application shares a container
3
What is input validation
Ensuring input conforms to a set of defined rules
Allowing special characters like '<' in usernames
Requiring date to be entered in the form dd/mm/yyyy
Checking, cleaning &filtering inputs of any unwanted characters & strings
4
What is the primary purpose of Dynamic Application Security Testing (DAST) tools?
To monitor network traffic for suspicious activity
to analyse source code of an application for vulnerabilities
To test products and provide feedback on compliance and general security
To manage and track software development projects
5
What is the primary purpose of sanitisation in data input?
Requiring date to be entered in the form dd/mm/yyyy
Allowing special characters like '<' in usernames
Checking, cleaning &filtering inputs of any unwanted characters & strings
Ensuring input conforms to a set of defined rules
6
Security weaknesses in an information systems
Vulnerability
Data Protection
Cyber Attacks
Cyber Safety
7
What is a cyber attack method that runs malicious code as part of a vulnerable web application & targets the user
Cross-site scripting (XSS)
SQL injection
Phishing
Denial of Service (DoS)
8
Acts performed by individuals with harmful intent whose goal is to steal data, cause damage or disrupt computing systems
Cyber Safety
Cyber Attacks
Data Protection
Vulnerability
9
What is the process of protecting sensitive information from damage, loss or corruption
Cyber Safety
Cyber Attacks
Data Protection
Vulnerability
10
What is penetration testing?
A process for developing software applications
A method to encrypt dat for secure transmission
A simulated cyber attack to check for exploitable vulnerabilities
A tool for monitoring network performance

Secure Software Architecture Flashcards | StudBud