DevSecOps 무료 덤프문제 온라인 액세스

When of the following statements BEST describes penetration testing?

• A.A coordinated cyber attack to check simulated vulnerabilities
• B.A planned cyber attack to check for actionable vulnerabilities
• C.A simulated cyber attack to check for exploitable vulnerabilities
• D.A coordinated cyber attack to check for planned vulnerabilities

When of the following BEST describes now developers and organizations can use the Open web Security Project (OWASP) top ten security risks tor web applications?

• A.It provides strict guidance on the compliance regulations of web application design.
• B.It provides a starting place for awareness, education and development of test models
• C.It provides audit assessment tools to determine if a web application is NIST compliant.
• D.It provides a check list for designing applications using microservices architecture

Which of the following BEST describes a public key cryptography architect?

• A.A person sends a message that is encrypted by the use of a public key, and the receiver can decipher the message using their private key.
• B.A person sends a message that is encrypted by using their private key, and the receiver must also use that private key to decipher the message.
• C.Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of public keys.
• D.Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of secure private keys.

Which of the following BEST describes the goal of the security principle of accountability and non-repudiation?

• A.Corporate reputation is maintained when practicing good authentication and data validation procedures
• B.Confidence between consumer and provider is achieved when users manage passwords *i a defined way
• C.Neither the sender nor the recipient of information or activity can later deny the transaction took place
• D.Trust between two parties is enhanced by a set of practices that validate integrity of data transmissions

Which of the following BEST describes a key characteristic of a lesson learned that ensures it will be used to reduce or eliminate the potential foe failures and future mishaps?

• A.A third party has identified the past activity as significant
• B.It is a confirmed historical act or outcome
• C.It is valid in factual and technical correctness
• D.The majority of stakeholders believe the data to be true