CCSP-p1

A database activity monitor (DAM) tool usually operates at Layer of the Open Systems Interconnection (OSI) model.

• A. 2

• B. 3

• C. 7

• D. Q

Database activity monitors (DAMs) can be used to reduce the potential success of attacks.

• A. SQL injection

• B. Cross-site scripting

• C. Insecure direct-object reference

• D. Social engineering

Transport Layer Security (TLS) provides ____________and ___________for communications.

• A. Privacy, security

• B. Security, optimization

• C. Privacy, integrity

• D. Enhancement, privacy

A virtual private network (VPN) is used to protect data in transit by .

• A. Securing each end of a client-server connection

• B. Creating an encrypted tunnel between two endpoints

• C. Encrypting databases

• D. Restricting key access to only eight parties

Sandboxing can often be used for .

• A. Optimizing the production environment by moving processes that are not frequently used into the sandbox

• B. Allowing secure remote access for users who need resources in the cloud environment

• C. Running malware for analysis purposes

• D. Creating secure subnets of the production environment

Application virtualization can typically be used for .

• A. Running an application in a non-native environment

• B. Installing updates to a system’s operating system (OS)

• C. Preventing escalation of privilege by untrusted users

• D. Enhancing performance of systems

Any organization that complies with ISO 27034 will have a maximum of Organizational Normative Framework(s) (ONF)(s).

• A. 0

• B. 1

• C. 5

• D. 25

Under ISO 27034, every application within a given organization will have an attendant set of controls assigned to it; the controls for a given application are listed in the .

• A. ONF

• B. ANF

• C. TTF

• D. FTP

Static application security testing (SAST) is usually considered a form of testing.

• A. White-box

• B. Black-box

• C. Gray-box

• D. Parched field

Static application security testing (SAST) examines .

• A. Software outcomes

• B. User performance

• C. System durability

• D. Source code