Secure-Software-Design 무료 덤프문제 온라인 액세스

Which concept is demonstrated when every module in a particular abstraction layer of a computing environment can only access the information and resources that are necessary for its legitimate purpose?

• A.Privacy
• B.Confidentiality
• C.Elevation of Privilege
• D.Principle of Least Privilege

Which DREAD category is based on how easily a threat exploit can be found?

• A.Reproducibility
• B.Discoverability
• C.Affected Users
• D.Damage Potential

In which step of the PASTA threat modeling methodology is vulnerability and exploit analysis performed?

• A.Define technical scope
• B.Attack modeling
• C.Define objectives
• D.Application decomposition

A potential threat was discovered during vulnerability testing when an environment configuration file was found that contained the database username and password stored in plain text.
How should existing security controls be adjusted to prevent this in the future?

• A.Enforce Role-Based Authorization
• B.Encrypt Secrets in Storage and Transit
• C.Validate All User Input
• D.Ensure Strong Password Policies are in Effect

Which secure coding best practice says to require authentication before allowing any files to be uploaded and to limit the types of files to only those needed for the business purpose?

• A.File management
• B.Data protection
• C.Communication security
• D.Memory management