CCSP Domain 4 Final Quiz

What is the most commonly overlooked but essential component to a comprehensive logging and monitoring strategy?

• Capturing login failures

• External log storage

• Reviewing logs

• Collecting administrative privilege elevation events

What are the two components to a federated identity system?

• Service provider and relying party

• LDAP and web server

• Identity provider and relying party.

• Identity provider and password store

Which o the ollowing security devices would enable a system to ilter out attacks such as SQL injection before they reach the application servers?

• Firewall

• XML accelerator

• Sandbox

• WAF

Which type o testing would not be perormed against an application that does

not contain sel-protection capabilities?

A.

B.

C.

D.

• RASP

• Pen

• SAST

• DAST

Which o the ollowing could not be used in a multifactor authentication system

along with a password?

• RSA token

• Retina scan

• Challenge-response with personal questions

• Fingerprint

Which o the ollowing would be the most important reason to have the development and production systems in the same cloud environment?

• APIs

• Operating systems

• Programming libraries

• Programming languages

Which is the most commonly used assertion method with federated identity systems?

• OAuth

• SAML

• OpenID

• WS

Which o the following is not part of the OWASP top ten list?

• Cryptographic failures

• Weak password requirements

• Vulnerable and outdated components

• Server-side request forgery

With a single sign-on system, what is passed between systems to verify the

user’s authentication?

• Tokens

• Masks

• Certificates

• Credentials

Which o the following is the only data format supported by SOAP?

• YAML

• SAML

• JSON

• XML