Security+ - TestOut - Chapter 10

Which of the following is the first step in the Waterfall application development model?

Which DLP method works by replacing sensitive data with realistic fictional data?

Which of the following functions does a single quote (') perform in an SQL injection?

Which of the following protocols are often added to other protocols to provide secure transmission of data?

Which attack that injects malicious scripts into web pages to redirect users to fake websites to gather personal info?

Which attack is a form of software exploitation that submits a longer stream of data than the input variable can handle?

Which of the following enters random data to the inputs of an application?

Recommend a secure method for transferring data between hosts on a network. Which protocol would you recommend?

What is the primary function of the IKE Protocol used with IPsec?

Which of the following protocols uses port 443?

What is the storage location called that holds all the development source files that version control systems use?

Which of the following protocols can TLS use for key exchange?

Which fuzz testing program type defines new test data based on models of the input?

Which TCP/IP protocol is a secure form of HTTP that uses SSL as a sub-layer for security?

SFTP uses which mechanism to provide security for authentication and data transfer?

Which of the following BEST describes dynamic data masking?

Which of the following is specifically meant to ensure that a program operates on clean, correct, and useful data?

Which attack is the act of exploiting a software program's acceptance of input to execute arbitrary code on a target?

Which of the following is a technology that tries to detect and stop sensitive data breaches in an organization?

Which of the following is considered a drawback of the Waterfall application development life cycle?

Which rights management category is applied to music, videos, and software that is sold to consumers?

Which development model is a continuous, changing process with never-ending versions, bug fixes, and enhancements?

Which DLP implementation can be used to monitor and control access to physical devices on workstations or servers?

Which of the following tools allow remote management of servers?

When using SSL authentication, what does the client verify first when checking a server's identity?