Security Awareness Quiz

What does “designing for security” involve?

• Adding security features after development

• Creating systems with built-in protections from the start

• Ignoring security during the development process

• Outsourcing security to third-party vendors

Which principle focuses on giving users only the necessary access they need?

• Risk Assessment

• Defense in Depth

• Principle of Least Privilege

• Regular Updates

What is a key part of the “Shift Left” approach in Agile security?

• Delaying security tests until after deployment

• Involving security teams early in development

• Ignoring security in sprint planning

• Outsourcing security testing

Which of the following is NOT a security threat?

• Cross-site scripting (XSS)

• Data breaches

• Automated backups

• Man-in-the-middle (MITM) attacks

Which strategy involves using multiple layers of defense to protect systems?

• Secure by default

• Fail-safe defaults

• Defense in Depth

• Automated Testing

What is the purpose of a security framework?

• To create software without documentation

• To manage an organization’s information security risks

• To delay security implementations

• To focus only on software aesthetics

Which protocol is recommended for secure communication?

• HTTP

• FTP

• SMTP

• HTTPS

What is an example of a secure data storage method?

• Storing data in plain text

• Database encryption

• Leaving data unprotected

• Using default passwords

Which of the following is an example of a security design consideration?

• Ignoring user input

• Secure data storage

• Disabling security features

• Using outdated software

What is a key benefit of conducting regular security testing?

• Increasing software performance

• Enhancing system vulnerabilities

• Identifying security flaws

• Reducing costs of development