During fuzz testing of the new product, an exception was thrown on the order entry view, which caused a full stack dump to be displayed in the browser window that included function names from the source code.
How should existing security controls be adjusted to prevent this in the future?

• A.Ensure all exceptions are handled in a standardized way
• B.Ensure privileges are restored after application exceptions
• C.Ensure private information is not logged
• D.Ensure sensitive information is scrubbed from all error messages

Comment: *

Name: *

Email: *

Verification: *

Which software control test examines the internal logical structures of a program and steps through the code line by line to analyze the program for potential errors?

• A.White box testing
• B.Reasonableness testing
• C.Black box testing
• D.Dynamic testing

Comment: *

Name: *

Email: *

Verification: *

Automated security testing was performed by attempting to log in to the new product with a known username using a collection of passwords. Access was granted after a few hundred attempts.
How should existing security controls be adjusted to prevent this in the future?

• A.Ensure credentials and authentication tokens are encrypted during transit
• B.Ensure strong password policies are enforced
• C.Ensure authentication controls are resistant to brute force attacks
• D.Ensure passwords are encrypted when stored in persistent data stores

Comment: *

Name: *

Email: *

Verification: *

Recent vulnerability scans discovered that the organization's production web servers were responding to ping requests with server type, version, and operating system, which hackers could leverage to plan attacks.
How should the organization remediate this vulnerability?

• A.Ensure servers are configured to return as little information as possible to network requests
• B.Ensure servers are regularly updated with the latest security patches
• C.Always uninstall or disable features that are not required
• D.Access to configuration files is limited to administrators

Comment: *

Name: *

Email: *

Verification: *

The final security review determined that two low-risk security issues identified in testing are still outstanding. Developers have assured the security team that both issues can be resolved quickly once they have time to fix them. The security team is confident that developers can fix the flaws in the first post-release patch.
What is the result of the final security review?

• A.Passed with Exceptions
• B.Not Passed but Does Not Require Escalation
• C.Passed
• D.Not Passed and Requires Escalation

Comment: *

Name: *

Email: *

Verification: *