Topic 11B: Cloud and Web Application Security Concepts

Which practice aims to minimize the potential entry points for attackers in cloud infrastructure?

• Cloud Fluffing

• Cloud Hardening

• Cloud Softening

• Cloud Puffing

What technique is essential for protecting against injection attacks and manipulating software behavior?

• Output Validation

• Code Whitelisting

• Input Validation

• Code Obscuring

Which cookie attribute restricts cookies to be sent only over secure connections?

• HTTP-Only

• Secure

• SameSite

• Non-Transferable

What is the primary purpose of static code analysis in software development?

• To enhance code performance

• To identify potential vulnerabilities before deployment

• To detect runtime errors

• To speed up code compilation

Which practice verifies the authenticity and integrity of software code?

• Code Encryption

• Code Signing

• Code Hashing

• Code Obfuscation

What method does NOT contribute to application protection measures?

• Error Handling

• Memory Management

• Code Signing

• Server-Side Validation

Which validation method only permits inputs matching predetermined approved values?

• Input Sanitization

• Input Blacklisting

• Input Whitelisting

• Input Randomization

What is the primary purpose of sandboxing in security operations?

• To restrict software execution to authorized users

• To isolate and control software execution environments

• To increase software performance

• To promote software interoperability

Which tool is used for sandboxing in security operations to analyze potentially harmful software?

• Merry Sandbox

• Joe Sandbox

• Jolly Sandbox

• Cheerful Sandbox

What is the primary goal of the OWASP Software Assurance Maturity Model?

• To provide guidelines for secure coding practices

• To evaluate software performance

• To standardize software development processes

• To assess software marketability