The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application development experts and published approximately every 24 months. The 2013 OWASP Top Ten list includes "cross-site scripting (XSS)." Which of the following is not a method for reducing the risk of XSS attacks?
Response:

• A.Use an auto-escaping template system.
• B.Sanitize HTML markup with a library designed for the purpose.
• C.HTML escape JSON values in an HTML context and read the data with JSON.parse.
• D.XML escape all identity assertions.

Comment: *

Name: *

Email: *

Verification: *

The BIA can be used to provide information about all the following, except:

• A.BC/DR planning
• B.Risk analysis
• C.Secure acquisition
• D.Selection of security controls

Comment: *

Name: *

Email: *

Verification: *

What concept does the "I" represent with the STRIDE threat model?

• A.Integrity
• B.Information disclosure
• C.IT security
• D.Insider threat

Comment: *

Name: *

Email: *

Verification: *

A localized incident or disaster can be addressed in a cost-effective manner by using which of the following?

• A.UPS
• B.Generators
• C.Joint operating agreements
• D.Strict adherence to applicable regulations

Comment: *

Name: *

Email: *

Verification: *

When a system needs to be exposed to the public Internet, what type of secure system would be used to perform only the desired operations?

• A.Firewall
• B.Proxy
• C.Honeypot
• D.Bastion

Comment: *

Name: *

Email: *

Verification: *