Endpoint & Application Development Security (C3)

While going through the network log, Sarah, a network security administrator, noticed substantial outbound network traffic. Which activity did Sarah perform?

• STIX

• IOC

• Telnet

• HTTP

By definition, what is the process of reducing security exposure and tightening security controls?

• Social engineering

• Hardening

• Passive reconnaissance

• Active scanning

Which of the following can be used to mitigate a limitation of public sharing centers in OSINT?

• AIS

• KRI

• HTTPS

• TTP

An organization is planning a revamp of the existing computer hardware with new ones. The IT manager has informed department heads that some computers have faced BIOS attacks in the past. He has requested help in preventing future BIOS attacks.

As an expert, which of these solutions can you use to effectively improve boot security when the new computers are implemented in the network?

• Implement BIOS supplemented with CMOS

• Use computers with flash memory for booting instead of BIOS

• Implement a Norton Antivirus solution

• Implement measured boot with UEFI

What additional measure should be enacted to increase the security on a computer network after secure boot, protective measures from attacks like antimalware, and intrusion detection systems are implemented in all the computers on the network?

• Implement an antivirus solution in all systems and servers

• Implement hardening at endpoints with patch management and operating system safeguards

• Disable operating system patch updates to prevent malicious attacks

• Disable connections on the Wi-Fi network

What is meant by "the chain of trust" in boot security?

• Each step in the boot sequence relies on the confirmation of the hardware root of trust.

• Each step in the boot sequence relies on the confirmation from the previous boot sequence step.

• Each step in the boot sequence relies on the operating system logs of the previous boot sequence for boot security.

• Each step in the boot sequence follows its own process independently, trusting the previous sequence step.

In which milestone should you use a network scanner and then confirm the scan manually with a room-by-room walkthrough?

• Reach Your Network

• Prepare to Document

• Protect Your Network

• Map Your Network

Which of the following is part of the OS security configuration?

• Enabling the most secure OS platform

• Installing the latest version of OS

• Disabling default passwords and unnecessary ports

• Giving all users administrator privileges

John is a project manager with an IT firm, and his current project of developing an ERP application is in the development stage. Currently, the application is not yet mature or stable enough to be placed in a test environment. Which of the following secure coding review techniques is applicable for his project?

• Perform static code analysis

• Perform dynamic code analysis

• Perform a structured manual analysis of code

• Perform a static binary code analysis

Sheena wants to make sure that her browser activity is safe and prevent others from intercepting her data as it is transmitted over the browser. What should Sheena do to achieve this objective?

• Fill all her forms through hidden fields only

• Send a secure cookie over the browser to the server

• Only visit websites that are hosted over HTTPS or HSTS

• Make sure that the content security policy is in place