Cyber Security Essentials UK 3

OWASP stands for

• Open Web Application Security Project

• Open World Application Security Project

• Open Web Application Security Principles

• Open Web Association Security Project

The No 1 in the Web Application Security OWASP Top Ten for 2021 is

• Broken access control 

• Injection

• Broken Object Level Authorization

• Cryptographic Failure

................................................................. are applications built in a microservices architecture using technologies like virtual machines, containers, and serverless platforms

• Web Native Applications

• Cloud native applications

• Application Program Interfaces

• Mobile Applications

Which of these is No: 1 in the OSWAP Top Ten Mobile Application
Vulnerability

• Improper Platform Usage

• Improper Credential Usage

• Insecure data storage

• Inadequate supply chain security

'Security Patch Updates' can be done in which phase of the Secure SDLC?

• Design

• Development

• Deployment

• Maintenance

............................................................................ is a list of cybersecurity vulnerabilities and exposures found in a specific software product. The list is linked to information from several different vulnerability databases, which allows users to more easily compare security tools and services.

• Common Weakness Enumeration 

• Common Vulnerabilities and Exposures

• CERT Coding Standards 

• OWASP Top 10

Which of these is not a Secure Coding Practices?

• Validate Input

• Heed Compiler Warning

• Sanitise Data Sent to other systems

• Use Effective Quality Assurance Technique

• Choice a Good Programming Language

Which of the following is NOT the Steps involved in Operational Security?

• Identify your sensitive data

• Identify possible threats

• Analyze security holes and other vulnerabilities

• Appraise the level of risk associated with each vulnerability

• Secure Design Patterns and Frameworks

SIEM stands for

• Security Information and Event Management

• Service Information and Event Management

• Security Information and Engineering Management

• Security Information and Event Mobility

Wireshark tool is a .................................

• Protocol Analyzer

• Capture and display real-time details of network traffic

• used for network troubleshooting

• Packet Analyzer

• All of the Above