Tag: security

Print the logs to a paper

Create a copy of data in your laptop/desktop

Copy the files to CD-R's

None of the above

Unvalidated input

Lack of authentication

Improper error handing

Insecure configuration management

Commercial applications

Custom built applications

In house developed applications

All of the above

Data Validation

Secure Cookies

Encryption

Comprehensive exception handling

Session ID

Account Privileges

UserName

Password

Ensure that the data has not been tampered with

Ensure that the session is valid

Ensure that the user is valid

All of the above

The type of users who would be accessing the data

Availability, Integrity and Confidentiality

The threat level the company faces

Access controls protecting the data

Availability, Integrity, Confidentiality

Usability, Reliability, Accountability

Quality, Accountability, Integrity

None of the above

During testing

During development

During design

During all phases of application development

An insecure J2EE web application

A framework for analyzing applications that communicate using the HTTP and HTTPS, most common usage is an intercepting proxy

Static Source Code Analyser

Penetration Testing Tool