The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application development experts and published approximately every 24 months.
The 2013 OWASP Top Ten list includes "cross- site scripting (XSS)."
Which of the following is not a method for reducing the risk of XSS attacks?

• A.HTML escape JSON values in an HTML context and read the data with JSON.parse.
• B.Sanitize HTML markup with a library designed for the purpose.
• C.XML escape all identity assertions.
• D.Use an auto-escaping template system.

Comment: *

Name: *

Email: *

Verification: *

Which attribute of data poses the biggest challenge for data discovery?

• A.Labels
• B.Quality
• C.Volume
• D.Format

Comment: *

Name: *

Email: *

Verification: *

When beginning an audit, both the system owner and the auditors must agree on various aspects of the final audit report.
Which of the following would NOT be something that is predefined as part of the audit agreement?

• A.Size
• B.Format
• C.Structure
• D.Audience

Comment: *

Name: *

Email: *

Verification: *

Which characteristic of automated patching makes it attractive?
Response:

• A.Capability to recognize problems quickly
• B.Speed
• C.Cost
• D.Noise reduction

Comment: *

Name: *

Email: *

Verification: *

With a federated identity system, where would a user perform their authentication when requesting services or application access?

• A.Cloud provider
• B.The application
• C.Their home organization
• D.Third-party authentication system

Comment: *

Name: *

Email: *

Verification: *