Unit 3 - 4.1.4 Application Security

What is the primary purpose of input validation in application security?

• Enhancing user experience

• Preventing security threats and vulnerabilities

• Optimizing code execution speed

• Ensuring compatibility across devices

How do secure cookies enhance data security on a user's device?

• They increase the size of cookies for better data storage

• They restrict cookies to encrypted (HTTPS) connections

• They allow cookies to be transmitted over unsecured connections

• They prevent cookies from being stored on the device

What is static code analysis primarily used for in application development?

• Reviewing and analyzing source code for security vulnerabilities

• Executing code to identify runtime errors

• Debugging code during runtime

• Automating user interface testing

What does code signing ensure regarding software code?

• It guarantees the code's performance

• It confirms the code's integrity and authenticity

• It determines the code's compatibility with different platforms

• It enhances the code's readability

What is the primary purpose of sandboxing in computing?

• Enhancing user experience

• Improving code performance

• Isolating running programs to prevent potential harm

• Accelerating network speed

How does sandboxing restrict the access of applications or processes?

• By providing unlimited access to system resources

• By enhancing file system access

• By allowing communication with external systems

• By imposing strict access controls

What is one benefit of controlling network access within a sandbox?

• Increased vulnerability to malware

• Enhanced network speed

• Reduced risk of unauthorized communication

• Greater exposure to security threats

Why is access to the file system restricted within a sandbox?

• To improve system performance

• To increase vulnerability to data breaches

• To prevent unauthorized reading or writing of files

• To streamline resource allocation

What is the primary goal of monitoring in IT management?

• Detecting and responding to events or issues

• Maximizing resource utilization

• Enhancing system complexity

• Eliminating the need for troubleshooting

How does monitoring contribute to cybersecurity?

• By increasing system downtime

• By reducing the need for security measures

• By analyzing logs and detecting suspicious activities

• By decreasing system performance