CompTIA Security+

Which of the following would be the most secure way to deploy a legacy application that requires a legacy operating system?

• Stress testing

• Sandboxing

• Placing it on an encrypted drive

• Dynamic testing

Which of the following statements are true of input validation?

• Requires a login with normal characters as input during testing

• Helps to overcome buffer overflow and DoS attack

• Includes sending any unexpected or maliciously crafted input to a system

• Ensures that different types of input are handled gracefully by an application

Which of the following is more secure and checks the submitted data to ensure its validity?

• Browser-side validation

• Server-side validation

• Client-side validation

• Database-side validation

While inspecting your web application, you found that it is vulnerable to a SQL injection attack. Which of the following steps should you immediately take?

• Put the web server on DMZ

• Add input validation to forms

• Install a host-based firewall on the web server

• Apply security patch for the operating system on the web server

Which of the following fully implements 802.11i security requirements?

• WPA

• WPA2

• WEP

• WPS

What is the process of applying manual changes to a program called?

• Patching

• Replacement

• Hotfix

• Service pack

Brena, a security analyst, notices that external users are constantly reporting that a web application is slow and frequently times out when attempting to submit information. Which of the following software development best practices will she implement to prevent the issue?

• Input validation

• Fuzzing

• Stress testing

• Regression testing

Gertrude is managing a new software project. The project has very clearly defined requirements that are not likely to change. Which of the following is the most appropriate development model for her?

• Scrum

• Agile

• XP programming

• Waterfall

Mary is responsible for website security in her company. She wants to address widely known and documented web application vulnerabilities. Which resource would be most helpful?

• OWASP

• ISO

• NIST

• CERT

Which programming model will be appropriate for the situations wherein the requirements are clearly defined well in advance?

• Prototyping

• Waterfall

• Scrum

• Agile