SEBA Tutor 10 WS23/24

Which are part of the Core Information Security Principles?

• Availability

• Confidentiality

• Isolation

• Integrity

"Impossibility to inappropriately deny a transaction or having sent a message"

• Non-repudiation

• Availability

• Usability

• Auditability

Select two API Security Risks from the OWASP list.

• Broken Object Level Authorisation

• Broken Function Level Authorisation

• Client Side Request Forgery

Authentication is how we verify the identity of a user.

• True

• False

Hashing is the process of transforming data to keep it secret from others, so that only specific individuals can reverse the transformation (for example with a specific private key)

• True

• False

Authorization concerns access control.

• True

• False