Host and Application Security

Fuzz testing works best in which of the following testing environments?

• Known environment testing

• Partially known environment testing

• Unknown environment testing

• Fuzz testing works equally well in all of the above.

Which code analysis method is performed while the software is executed, either on a target system or an emulated system?

• Static analysis

• Runtime analysis

• Sandbox analysis

• Dynamic analysis

Which of the following are associated with endpoint protection? (Choose all that apply.)

• EDR

• TPM

• DLP

• HTTP headers

You have a series of web servers that you wish to harden. Which of the following is the best solution for this case?

• A block list/deny list

• An allow list

• Secure cookies

• Code signing

You are examining the server infrastructure and wish to harden the machines in your server farm. Which is the first task you should perform across all of your servers?

• Apply a block list/deny list.

• Apply an allow list

• Block open ports and disable unused services

• Employ disk encryption.

Databases can use which of the following for security? (Choose all that apply.)

• Tokenization

• Salting

• Code signing

• Secure cookies

When you’re creating a website, which of the following will provide protection against user attacks against your site? (Choose all that apply.)

• Tokenization

• HTTP headers

• Code signing

• Fuzzing

Your firm has 200 desktops in three sites, split among a dozen business departments. Which of the following would be the first that you should ensure is working correctly to reduce risk?

• Application security

• Secure Boot

• Patch management

• Secure cookies

ou have a database full of very sensitive data. Salespeople need to access some of this sensitive data when onsite with a customer. The best method to prevent leakage of critical data during these access sessions would be to employ which of the following?

• Salting

• Hashing

• Block list

• Tokenization

Which of the following elements is not part of the Root of Trust?

• Registry

• UEFI

• TPM PCR

• Digital signatures