Which of the following threat types involves an application developer leaving references to internal information and configurations in code that is exposed to the client?

• A.Sensitive data exposure
• B.Security misconfiguration
• C.Insecure direct object references
• D.Unvalidated redirect and forwards

Comment: *

Name: *

Email: *

Verification: *

What type of data does data rights management (DRM) protect?

• A.Consumer
• B.PII
• C.Financial
• D.Healthcare

Comment: *

Name: *

Email: *

Verification: *

Which of the following would NOT be a reason to activate a BCDR strategy?

• A.Staffing loss
• B.Terrorism attack
• C.Utility disruptions
• D.Natural disaster

Comment: *

Name: *

Email: *

Verification: *

You have been tasked with creating an audit scope statement and are making your project outline.
Which of the following is NOT typically included in an audit scope statement?

• A.Classification
• B.Costs
• C.Statement of purpose
• D.Deliverables

Comment: *

Name: *

Email: *

Verification: *

Within a federated identity system, which entity accepts tokens from the identity provider?

• A.Assertion manager
• B.Servicing party
• C.Proxy party
• D.Relying party

Comment: *

Name: *

Email: *

Verification: *