Security Engineering

What is the difference between application security and infrastructure security?

• Infrastructure security protects the application code

• Application security focuses on securing data and functionalities

• Infrastructure security only deals with software vulnerabilities

• Application security does not include encryption

What is essential in secure software design?

• Ignoring data encryption

• Allowing any type of access

• Validate user input

• Not making regular backups

Which of the following is an example of an operational risk?

• Weak password policies

• Using outdated software libraries

• Unpatched server firmware

• A DoS (Denial of Service) attack

Why is system survivability crucial in complex environments?

• It ensures rapid response to incidents and disaster recovery

• It makes the system more vulnerable to attacks

• It reduces the need for authentication

• It removes the need for risk assessments

What is the purpose of vulnerability management?

• Only fixing security issues after an attack

• Ensuring that the software remains outdated

• Identifying, assessing, and mitigating security weaknesses

• Ignoring minor software issues