CSSLP-3

Which of the following is the duration of time and a service level within which a business process must be restored after a disaster in order to avoid unacceptable consequences associated with a break in business continuity?

• A. RTO

• B. RTA

• C. RPO

• D. RCO.

Implementing Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA) protection is a means of defending against

• A. SQL Injection

• B. Cross-Site Scripting (XSS)

• C. Cross-Site Request Forgery (CSRF)

• D. Insecure cryptographic storage

Impersonation attacks such as Man-in-the-Middle (MITM) attacks in an Internet application can be BEST mitigated using proper

• A. Configuration Management.

• B. Session Management.

• C. Patch Management.

• D. Exception Management.

Using multifactor authentication is effective in mitigating which of the following application security risks?

• A. Injection flaws

• B. Cross-Site Scripting (XSS)

• C. Buffer overflow

• D. Man-in-the-Middle (MITM)

Assembly and machine language are examples of

• A. natural language

• B. very high-level language (VHLL)

• C. high-level language (HLL)

• D. low-level language

Software developers writes software programs PRIMARILY to

• A. create new products

• B. capture market share

• C. solve business problems

• D. mitigate hacker threats

When the software is designed using Representational State Transfer (REST) architecture, it promotes which of the following good programming practices?

• A. High Cohesion

• B. Low Cohesion

• C. Tight Coupling

• D. Loose Coupling

Which of the following is known to circumvent the ring protection mechanisms in operating systems?

• A. Cross Site Request Forgery (CSRF)

• B. Coolboot

• C. SQL Injection

• D. Rootkit

The inner workings and internal structure of backend databases can be protected from disclosure using

• A. triggers.

• B. normalization.

• C. views.

• D. encryption

When designing software to work in a mobile computing environment, the Trusted Platform Module (TPM) chip can be used to provide which of the following types of information?

• A. Authorization.

• B. Identification.

• C. Archiving.

• D. Auditing