Module 9 CSEC

What are the three key elements that define a secure application?

• Confidentiality, integrity, and availability

• Speed, efficiency, and reliability

• Usability, design, and functionality

• Cost, scalability, and performance

What is a restricted resource in the context of a secure application?

• Any object, data, feature, or function designed to be accessed by only authorized users

• Any publicly available data

• Any resource that is free to use

• Any outdated software component

Why are perimeter security controls like firewalls and IDS systems not sufficient to secure applications?

• They are too expensive to maintain.

• They cannot defend against application layer attacks.

• They are outdated technologies.

• They require constant manual monitoring.

Which ports are generally open on perimeter devices for legitimate web traffic?

• 21 and 22

• 25 and 110

• 80 and 443

• 8080 and 8443

What is one of the responsibilities of application security administration?

• Installing new applications

• Preventing applications from creating and modifying executable files

• Developing new software

• Designing user interfaces

Which of the following is a practice involved in application security administration?

• Application design

• Application whitelisting/blacklisting

• Application marketing

• Application testing

What does application security administration aim to protect against?

• Software development errors

• Security risks from security misconfigurations

• Network speed issues

• User interface bugs

What is one of the key components of the Application Security Frame?

• Input Validation

• Data Encryption

• Network Segmentation

• User Interface Design

Which of the following is a method used for securing the network in the Application Security Frame?

• Router

• Data Masking

• Load Balancing

• User Training

What is a component of securing the host according to the Application Security Frame?

• Patches and Updates

• Data Compression

• User Interface Testing

• Network Redundancy