Security Concepts Quizs

Data protection

• Safeguarding data from unauthorised access or alterations.

• Sharing data with third parties for marketing purposes.

• Storing data in a public cloud without encryption.

• Deleting data permanently without backup.

Grey box analysis

• A method of analysing software security where partial knowledge of the internal workings is involved.

• A technique for testing software without any knowledge of its internal structure.

• A process of evaluating software performance based solely on user feedback.

• A strategy for developing software that requires complete transparency of the code.

Security vulnerabilities in software applications.

• Weaknesses in software that can be exploited by attackers.

• Features that enhance software performance.

• User interface design flaws in applications.

• Outdated software versions that are no longer supported.

An individual with expertise in analyzing and addressing security vulnerabilities in software applications.

• Security analyst

• Security specialist

• Software developer

• Network administrator

Installation

• The process of deploying software onto a system or network for use.

• A method of uninstalling software from a device.

• A technique for optimizing system performance.

• A procedure for backing up data on a server.

Two-factor authentication (2FA)

• A security process that requires users to provide 2 different authentication factors to gain access.

• A method of securing a password by adding a special character.

• A technique that allows users to log in without a password.

• A system that uses biometric data for authentication.

Requirements definition

• Establishing and documenting the needs and functional specifications of a software application.

• Creating a user interface design for the application.

• Testing the application for bugs and errors.

• Deploying the application to a production environment.

Setting a limit on how long a user session remains active before requiring re-authentication.

• Definition of session timing.

• A method to increase user engagement.

• A technique for data encryption.

• A strategy for user interface design.

Application programming interface (API)

• A method for two or more computer programs to communicate with each other.

• A type of hardware interface for connecting devices.

• A programming language used for web development.

• A database management system for storing data.

Secure Sockets Layer (SSL) and/or Hypertext Transfer Protocol Secure (HTTPS)

• Protocols used to secure communication over a computer network.

• Protocols used for file transfer over the internet.

• Protocols for email encryption and security.

• Protocols for remote desktop access.