Which of the following threat types involves the sending of commands or arbitrary data through input fields in an application in an attempt to get that code executed as part of normal processing?

• A.Cross-site scripting
• B.Missing function-level access control
• C.Injection
• D.Cross-site forgery

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important requirement and guidance for testing during an audit?

• A.Stakeholders
• B.Shareholders
• C.Management
• D.Regulations

Comment: *

Name: *

Email: *

Verification: *

Which of these characteristics of a virtualized network adds risks to the cloud environment?

• A.Redundancy
• B.Pay-per-use
• C.Self-service
• D.Scalability

Comment: *

Name: *

Email: *

Verification: *

Your company has just been served with an eDiscovery order to collect event data and other pertinent information from your application during a specific period of time, to be used as potential evidence for a court proceeding.
Which of the following, apart from ensuring that you collect all pertinent data, would be the MOST important consideration?
Response:

• A.Encryption
• B.Compression
• C.Chain of custody
• D.Confidentiality

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT one of the components of multifactor authentication?

• A.Something the user knows
• B.Something the user has
• C.Something the user sends
• D.Something the user is

Comment: *

Name: *

Email: *

Verification: *