Tag: security

NIST

OWASP

WASC

MITRE

Online Web Application Software Product

Open Web Application Security Process

Open Web Application Security Project

None of the above

Common Weakness Enumeration

Common Weaknesses and Exposures

Comprehensive Weaknesses and Exposures

Comprehensive Weakness Enumeration

The type of users who would be accessing the data

Availability, Integrity and Confidentiality

The threat level the company faces

Access controls protecting the data

Another term for identification

Method of validating a credential set

Method of evaluating the access privileges

None of the above

A potential danger to information or system

Any type of weakness in the system

None of the above

All of the above

Commitment and support from senior management

Appropriate technical and logical security controls

Updates security policies, procedures and guidelines

Security training to all employees

A method by which credentials are validated

A method of ensuring that a subject is the entity it claims to be

Its just another term for authentication

Its just another term for authorization

Detailed instructions on how to carry out security tasks

Guidelines to achieve security goals

Broad and high level statements from the top management of the organization

None of the above

Availability, Integrity, Confidentiality

Usability, Reliability, Accountability

Quality, Accountability, Integrity

None of the above