Multiple choice technology security

Which of the following is incorrect with respect to Application Denial of Service?

  1. Application Denial of Service attacks tend to exploit flaws in application design/architecture & implementation to prevent legitimate access to victim’s services

  2. Application Denial of Service has 2 typical types: Account Lockout & Database Slowdown

  3. Application developers should implement a strong positive validation mechanism at the server side, capable of filtering out malicious code/scripts from the user input.

  4. Use principle of full privilege to provide grant access to a service/resource in the web application to the end users/clients
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The principle of full privilege is insecure; applications must instead follow the principle of least privilege, granting users only the minimum access necessary. The other statements accurately describe application Denial of Service mechanisms and defenses.

Keep practicing — related questions