Tag: technology

Questions Related to technology

Multiple choice technology security

From application security perspective, when do we need to use CAPTCHA in an web page

To prevent scripted attach
to provide biometric authentication
to check the color blindness of user
more security

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

A team member wrote a piece of code. IQA is being done by other team member in the same project. What type of testing does he do

compliance testing
functional testing
unit testing
black box testing

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

When do we need to be performance testing

After system testing and application security testing but before deployment to production
After application security testing but before acceptance test by the client/end user
just before deployment to production
after system test

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

When do we need to be penetration testing

After integration testing but before acceptance testing by the client/end user
after unit test
after integration testing
during system testing

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

In threat modeling, what methodology used to perform risk analysis

STRIDE
DREAD
OWASP
DAR

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

In DREAD methodology of risk analysis in threat analysis, how is the Risk score for each threat is calculated

Risk score = (Reproducibility * Exploitability * Discoverability) / (Damage potential * Affected users)
Risk score = (Reproducibility * Exploitability - Discoverability) ^ (Damage potential + Affected users)
Risk score = (Reproducibility + Exploitability + Discoverability) / (Damage potential + Affected users)
Risk score = (Reproducibility + Exploitability + Discoverability) * (Damage potential + Affected users)

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Select the correct choice for "Security Design Principle"

1) Keep it easy to understand 2) Secure default access 3) Defense in Depth 4) encapsulation 5) Highest privilege
1) Keep it easy to understand 2) Secure access 3) Defense in Depth 4) encapsulation 5) Highest privilege
1) Keep it simple and secure 2) Secure default access 3) Defense in Depth 4) Compartmentalization 5) Least privilege
1) Keep it easy to understand 2) Secure access 3) DMZ 4) encapsulation 5) Highest privilege

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

The kind of testing in which activities are performed to find the active machines, open ports and available services, identifying the OS and mapping the network

Passive Scanning
Social Engineering
Scanning
Fuzzing

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

What is the best approach to be used while providing access to SSO application in a portal

Mandatory access control
Role Based Access Control
Discretionary Access Control
Biometric access control

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Which tool can be used for system vulnerability test

Nessus
HP Web Inspect
TAM
SDL

Reveal answer Fill a bubble to check yourself