5-1

Security Principle: Understanding the amount of work necessary for an attacker to break the system or network.

Analyzes code at fixed points in development

Security Principles: Defines security should be assimple as possible.

The most common method of tracking a customer accessing an organization’s website is by assigning a unique

Session Management Functions include

Mobile Testing is testing done in Alabama

Security Principle: Ensuring information on systems is available to check on events or incidents of compromise

Security Principles: This principle dictates task or resources are set to theminimum rights required to perform its job.

____ is the process of developing, testing, and adding security features withinapplications

Security Principles: critical data should be maintained in the event of catastrophic system failure.

a unique code that’s associated with your particular login session helps mitigate which SESSION attack vector

Understanding the threats associated with the environment isn't important in planning security controls for a server

Security Principles: To train and educate users to design securitymechanisms and policies that are usable and effective.

Application security: checks that a user has rights to use an application by comparing the user’s identity with a list

Knowledge ofpotential ___ is important to understanding the reasons behind the various technical security practices.

Organizations should conduct risk assessments to identify the specific threats against their servers

Application security: Provides a time-stamped record of which aspects of the application were accessed and by whom.

Analyzes code while runing

HTTPS helps mitigate which SESSION attack vector

Many threats against data and resources are possible because of unintentional mistakes

Types of application security: procedures in an application to ensure thatonly authorized users gain access to it.

Security Principles: If a failure occurs, the system should fail in a secure manner

Application security: other security measures can protect sensitive data from being seen or even used by attackers

To secure a server, it is essential to define the threats that must be mitigated.

Approach states: All simple tasks should be automated in order to allow teams to focus on more challenging undertakings.

This best depicts which principle?: the role of a system admin should be different than a database admin

Todays applications are less secure because of mass network availability and cloud usage

Test code while runing and at rest

Security mechanisms need to be layered so thata single security incident is insufficient to compromise a host or network

is a type of application security testing where developers test the results of unexpected values or inputs

___ aims to detect security holes from day one in order toprevent security issues, to begin with, and resolve them

Which is not a common attack on sessions

Best Practices: employing an experienced pen-tester to test the application.

Best Practices: Installing software updates and patches is one of the most effective ways to keep your software secure.

Best Practices: Encrypt Data at rest and in Transit

PICK TRUE: Brush up on TLS/SSL. Remember T comes after S. SO SSL is older (legacy)

input validation as well as Secure cookies helps mitigate which SESSION attack vector