Question 1

True or False. A security architect's job is to make sure that security considerations dominate other design aspects such as usability, resilience and cost.

Accepted Answer

False (CORRECT)

Question 2

Which of these is an aspect of an Enterprise Architecture?

Accepted Answer

Considers the needs of the entire organization (CORRECT)

Question 3

Which of these is an aspect of a Solution Architecture?

Accepted Answer

Describes how specific products or technologies are used (CORRECT)

Question 4

Which three (3) of these are general features of Building Blocks? (Select 3)

Accepted Answer

Defined boundary, but can work with other building blocks, Package of function defined to meet a business need, Could be an actor, business service, application or data (CORRECT)

Question 5

Which three (3) of these are Architecture Building Blocks (ABBs)? (Select 3)

Accepted Answer

Data Security, Identity and Access Management, Application Security (CORRECT)

Question 6

Which three (3) of these are Solution Building Blocks (SBBs)? (Select 3)

Accepted Answer

Key Security Manager, HSM, Certificate Authority (CORRECT)

Question 7

The diagram below shows which type of architecture?

Accepted Answer

Enterprise Security Architecture (CORRECT)

Question 8

Solution architectures often contain diagrams like the one below. What does this diagram show?

Accepted Answer

Architecture overview (CORRECT)

Question 9

In security architecture, a reusable solution to a commonly recurring problem is known as what?

Accepted Answer

A pattern (CORRECT)

Question 10

Which of these is an application security threat?

Accepted Answer

Malware (CORRECT)

Question 11

Failure to use input validation in your application introduces what?

Accepted Answer

A vulnerability (CORRECT)

Question 12

Which software development lifecycle is characterized as a top-down approach where one stage of the project is completed before the next stage begins?

Accepted Answer

Waterfall (CORRECT)

Question 13

Which form of penetration testing allows the testers complete knowledge of the systems they are trying to penetrate in advance of their attack to simulate an internal attack from a knowledgeable insider?

Accepted Answer

White Box testing (CORRECT)

Question 14

Which application testing method requires access to the original application source code?

Accepted Answer

SAST: Static Application Security Testing (CORRECT)

Question 15

Which three (3) steps are part of a Supplier Risk Assessment? (Select 3)

Accepted Answer

Identify how the risk would impact the business, Identify how any risks would impact your organization's business, Determine the likelihood the risk would interrupt the business (CORRECT)

Question 16

What type of firewall should you install to protect applications used by your organization from hacking?

Accepted Answer

A web application firewall (WAF) (CORRECT)

Question 17

Which type of application attack would include elevation of privilege, data tampering and luring attacks?

Accepted Answer

Authorization (CORRECT)

Question 18

Which type of application attack would include information disclosure and denial of service?

Accepted Answer

Authentication (CORRECT)

Question 19

Which one of the OWASP Top 10 Application Security Risks would be occur when untrusted data is sent to an interpreter as part of a command or query?

Accepted Answer

Injection (CORRECT)

Question 20

Which one of the OWASP Top 10 Application Security Risks would be occur when a poorly configured XML processor evaluates an external entity reference within an XML document allowing the external entity to expose internal files?

Accepted Answer

XML external entities (XXE) (CORRECT)

Question 21

Which of these threat modeling methodologies was introduced in 1999 at Microsoft to provide their developer’s a mnemonic that would help them find security vulnerabilities in their products?

Accepted Answer

STRIDE (CORRECT)

Question 22

Security standards do not have the force of law but security regulations do. Which one of these is a security regulation?

Accepted Answer

Gramm-Leach-Bliley Act (CORRECT)

Question 23

Which phase of DevSecOps would contain the activities Threat modeling & risk analysis, Security backlog and Architecture & design?

Accepted Answer

Plan (CORRECT)

Question 24

Which phase of DevSecOps would contain the activities Continuous component control, Application and infrastructure orchestration, and Data cleansing & retention?

Accepted Answer

Release, deploy & decommission (CORRECT)

Question 25

The Release step in the DevSecOps Release, Deploy & Decommission phase contains which of these activities?

Accepted Answer

Versioning of infrastructure (CORRECT)

Question 26

The Detect & Visualize step in the DevSecOps Operate & Monitor phase contains which of these activities?

Accepted Answer

Inventory (CORRECT)

Question 27

True or False. Finding a bug in a software product from a major vendor can be very profitable for a security researcher.

Accepted Answer

True (CORRECT)

Question 28

Which is the top vulnerability found in common security products?

Accepted Answer

Cross-site scripting (CORRECT)

Question 29

True or False. Building software defenses into your software includes: input validation, output sensitization, strong encryption, strong authentication and authorization.

Accepted Answer

True (CORRECT)

Question 30

Complete the following statement. Cross-site scripting ____

Accepted Answer

allows attackers to inject client-side scripts into a web page. (CORRECT)

Question 31

True or False. A Stored XSS attack is potentially far more dangerous than a Reflected XSS attack.

Accepted Answer

True (CORRECT)

Question 32

Cross-site scripting attacks can be minimized by using HTML and URL Encoding. How would a browser display this string?: Test

Accepted Answer

Test (CORRECT)

Question 33

Which is the most effective means of validating user input?

Accepted Answer

Whitelisting (CORRECT)

Question 34

True or False. A security architect's job is to make sure that security considerations are balanced against other design aspects such as usability, resilience and cost.

Accepted Answer

True (CORRECT)

Question 35

Which of these is an aspect of an Enterprise Architecture?

Accepted Answer

Maps the main components of a problem space and solution at a very high level. (CORRECT)

Question 36

Which of these is an aspect of a Solution Architecture?

Accepted Answer

Shows the internal data and use of reusable or off-the-shelf components (CORRECT)

Question 37

Which three (3) of these are features of Architecture Building Blocks (ABBs)? (Select 3)

Accepted Answer

Guides the development of a Solution Architecture, Product and vendor neutral, Captures and defines requirements such as function, data, and application (CORRECT)

Question 38

Which three (3) of these are Architecture Building Blocks (ABBs)? (Select 3)

Accepted Answer

Infrastructure and Endpoint Security, Detect and Respond, Identity and Access Management (CORRECT)

Question 39

Which three (3) of these are Solution Building Blocks (SBBs)? (Select 3)

Accepted Answer

Hardware Token, Privilege Access Manager, Web Application Firewall (WAF) (CORRECT)

Question 40

The diagram below shows which level of architecture?

Accepted Answer

Enterprise Security Architecture (CORRECT)

Question 41

Solution architectures often contain diagrams like the one below. What does this diagram show?

Accepted Answer

Solution architecture overview (CORRECT)

Question 42

Solution architectures often contain diagrams like the one below. What does this diagram show?

Accepted Answer

External context and boundary diagram (CORRECT)

Question 43

What is lacking in a security architecture pattern that prevents it from being used as a finished design?

Accepted Answer

The context of the project at hand (CORRECT)

Question 44

What are the possible consequences if a bug in your application becomes known?

Accepted Answer

All of the above (CORRECT)

Question 45

What was the ultimate consequence to Target Stores in the United States from their 2013 data breach in which over 100M records were stolen?

Accepted Answer

Costs and fines estimated at $1B. (CORRECT)

Question 46

Select the two (2) top vulnerabilities found in common security products. (Select 2)

Accepted Answer

Cross-site request forgery, Cross-site scripting (CORRECT)

Question 47

True or False. If you can isolate your product from the Internet, it is safe from being hacked.

Accepted Answer

False (CORRECT)

Question 48

Which three (3) things can Cross-site scripting be used for? (Select 3)

Accepted Answer

Steal cookies, Harvest credentials, Take over sessions (CORRECT)

Question 49

True or False. Commonly a Reflect XSS attack is sent as part of an Email or a malicious link and affects only the the user who receives the Email or link.

Accepted Answer

True (CORRECT)

Question 50

Cross-site scripting attacks can be minimized by using HTML and URL Encoding. How would a browser display this string?:

Accepted Answer

Password (CORRECT)

Question 51

Which three (3) statements about whitelisting user input are true? (Select 3)

Accepted Answer

Whitelisting reduces the attack surface to a known quantity, Special characters should only be allowed on an exception basis, Whenever possible, input should be whitelisted to alphanumeric values to prevent XSS (CORRECT)

Question 52

Which two (2) statements are considered good practice for avoiding XSS attacks (Select 2)

Accepted Answer

Encode all data output as part of HTML and JavaScript, Use strict whitelists on accepting input (CORRECT)

Question 53

How would you classify a hactivist group who thinks that your company's stance on climate change threatens the survival of the planet?

Accepted Answer

A threat (CORRECT)

Question 54

Which software development lifecycle is characterized by short bursts of analysis, design, coding and testing during a series of 1 to 4 week sprints?

Accepted Answer

Agile and Scrum (CORRECT)

Question 55

Which software development lifecycle is characterized by a series of cycles and an emphasis on security?

Accepted Answer

Spiral (CORRECT)

Question 56

Which form of penetration testing allows the testers no knowledge of the systems they are trying to penetrate in advance of their attack to simulate an external attack by hackers with no knowledge of an organizations systems?

Accepted Answer

Black Box Testing (CORRECT)

Question 57

Which application testing method requires a URL to the application, is quick and cheap but also produces the most false-positive results?

Accepted Answer

DAST: Dynamic Security Application Testing (CORRECT)

Question 58

Which type of application attack would include buffer overflow, cross-site scripting, and SQL injection?

Accepted Answer

Input validation (CORRECT)

Question 59

Which type of application attack would include unauthorized access to configuration stores, unauthorized access to administration interfaces and over-privileged process and service accounts?

Accepted Answer

Configuration management (CORRECT)

Question 60

Which one of the OWASP Top 10 Application Security Risks would occur when authentication and session management functions are implemented incorrectly allowing attackers to compromise passwords, keys or session tokens.

Accepted Answer

Broken authentication (CORRECT)

Question 61

Which one of the OWASP Top 10 Application Security Risks would occur when restrictions on what a user is allowed to do is not properly enforced?

Accepted Answer

Broken access control (CORRECT)

Question 62

Which of these threat modeling methodologies is integrated seamlessly into an Agile development methodology?

Accepted Answer

VAST (CORRECT)

Question 63

Security standards do not have the force of law but security regulations do. Which one of these is a security regulation?

Accepted Answer

HIPAA (CORRECT)

Question 64

Which phase of DevSecOps would contain the activities Secure application code, Secure infrastructure configuration, and OSS/COTS validation?

Accepted Answer

Code & build (CORRECT)

COURSE 6 – CYBER THREAT INTELLIGENCE

Module 4: Application Security and Testing

IBM CYBERSECURITY ANALYST PROFESSIONAL CERTIFICATE

Complete Coursera Study Guide

TABLE OF CONTENT

INTRODUCTION – Application Security and Testing

Learning Objectives

SECURITY ARCHITECTURE CONSIDERATIONS KNOWLEDGE CHECK

1. True or False. A security architect’s job is to make sure that security considerations dominate other design aspects such as usability, resilience and cost.

2. Which of these is an aspect of an Enterprise Architecture?

3. Which of these is an aspect of a Solution Architecture?

4. Which three (3) of these are general features of Building Blocks? (Select 3)

5. Which three (3) of these are Architecture Building Blocks (ABBs)? (Select 3)

6. Which three (3) of these are Solution Building Blocks (SBBs)? (Select 3)

7. The diagram below shows which type of architecture?

8. Solution architectures often contain diagrams like the one below. What does this diagram show?

9. In security architecture, a reusable solution to a commonly recurring problem is known as what?

APPLICATION SECURITY TECHNIQUES AND RISKS KNOWLEDGE CHECK

1. Which of these is an application security threat?

2. Failure to use input validation in your application introduces what?

3. Which software development lifecycle is characterized as a top-down approach where one stage of the project is completed before the next stage begins?

4. Which form of penetration testing allows the testers complete knowledge of the systems they are trying to penetrate in advance of their attack to simulate an internal attack from a knowledgeable insider?

5. Which application testing method requires access to the original application source code?

6. Which three (3) steps are part of a Supplier Risk Assessment? (Select 3)

7. What type of firewall should you install to protect applications used by your organization from hacking?

8. Which type of application attack would include elevation of privilege, data tampering and luring attacks?

9. Which type of application attack would include information disclosure and denial of service?

10. Which one of the OWASP Top 10 Application Security Risks would be occur when untrusted data is sent to an interpreter as part of a command or query?

11. Which one of the OWASP Top 10 Application Security Risks would be occur when a poorly configured XML processor evaluates an external entity reference within an XML document allowing the external entity to expose internal files?

12. Which of these threat modeling methodologies was introduced in 1999 at Microsoft to provide their developer’s a mnemonic that would help them find security vulnerabilities in their products?

13. Security standards do not have the force of law but security regulations do. Which one of these is a security regulation?

DEVSECOPS & SECURITY AUTOMATION KNOWLEDGE CHECK

1. Which phase of DevSecOps would contain the activities Threat modeling & risk analysis, Security backlog and Architecture & design?

2. Which phase of DevSecOps would contain the activities Continuous component control, Application and infrastructure orchestration, and Data cleansing & retention?

3. The Release step in the DevSecOps Release, Deploy & Decommission phase contains which of these activities?

4. The Detect & Visualize step in the DevSecOps Operate & Monitor phase contains which of these activities?

DEEP DIVE INTO CROSS-SCRIPTING KNOWLEDGE CHECK

1. True or False. Finding a bug in a software product from a major vendor can be very profitable for a security researcher.

2. Which is the top vulnerability found in common security products?

3. True or False. Building software defenses into your software includes: input validation, output sensitization, strong encryption, strong authentication and authorization.

4. Complete the following statement. Cross-site scripting ____

5. True or False. A Stored XSS attack is potentially far more dangerous than a Reflected XSS attack.

6. Cross-site scripting attacks can be minimized by using HTML and URL Encoding. How would a browser display this string?: &lt;b&gt;Test&lt;/b&gt;

7. Which is the most effective means of validating user input?

APPLICATION TESTING GRADED ASSESSMENT

1. True or False. A security architect’s job is to make sure that security considerations are balanced against other design aspects such as usability, resilience and cost.

2. Which of these is an aspect of an Enterprise Architecture?

3. Which of these is an aspect of a Solution Architecture?

4. Which three (3) of these are features of Architecture Building Blocks (ABBs)? (Select 3)

5. Which three (3) of these are Architecture Building Blocks (ABBs)? (Select 3)

6. Which three (3) of these are Solution Building Blocks (SBBs)? (Select 3)

7. The diagram below shows which level of architecture?

8. Solution architectures often contain diagrams like the one below. What does this diagram show?

9. Solution architectures often contain diagrams like the one below. What does this diagram show?

10. What is lacking in a security architecture pattern that prevents it from being used as a finished design?

11. What are the possible consequences if a bug in your application becomes known?

12. What was the ultimate consequence to Target Stores in the United States from their 2013 data breach in which over 100M records were stolen?

13. Select the two (2) top vulnerabilities found in common security products. (Select 2)

14. True or False. If you can isolate your product from the Internet, it is safe from being hacked.

15. Which three (3) things can Cross-site scripting be used for? (Select 3)

16. True or False. Commonly a Reflect XSS attack is sent as part of an Email or a malicious link and affects only the the user who receives the Email or link.

17. Cross-site scripting attacks can be minimized by using HTML and URL Encoding. How would a browser display this string?:

&lt;b&gt;Password&lt;/b&gt;

18. Which three (3) statements about whitelisting user input are true? (Select 3)

19. Which two (2) statements are considered good practice for avoiding XSS attacks (Select 2)

20. How would you classify a hactivist group who thinks that your company’s stance on climate change threatens the survival of the planet?

21. Which software development lifecycle is characterized by short bursts of analysis, design, coding and testing during a series of 1 to 4 week sprints?

22. Which software development lifecycle is characterized by a series of cycles and an emphasis on security?

23. Which form of penetration testing allows the testers no knowledge of the systems they are trying to penetrate in advance of their attack to simulate an external attack by hackers with no knowledge of an organizations systems?

24. Which application testing method requires a URL to the application, is quick and cheap but also produces the most false-positive results?

25. Which type of application attack would include buffer overflow, cross-site scripting, and SQL injection?

26. Which type of application attack would include unauthorized access to configuration stores, unauthorized access to administration interfaces and over-privileged process and service accounts?

27. Which one of the OWASP Top 10 Application Security Risks would occur when authentication and session management functions are implemented incorrectly allowing attackers to compromise passwords, keys or session tokens.

28. Which one of the OWASP Top 10 Application Security Risks would occur when restrictions on what a user is allowed to do is not properly enforced?.

29. Which of these threat modeling methodologies is integrated seamlessly into an Agile development methodology?

30. Security standards do not have the force of law but security regulations do. Which one of these is a security regulation?

31. Which phase of DevSecOps would contain the activities Secure application code, Secure infrastructure configuration, and OSS/COTS validation?

32. Which phase of DevSecOps would contain the activities Detect & Visualize, Respond, and Recover?

33. The Deploy step in the DevSecOps Release, Deploy & Decommission phase contains which of these activities?

34. The Respond step in the DevSecOps Operate & Monitor phase contains which of these activities?

6. Cross-site scripting attacks can be minimized by using HTML and URL Encoding. How would a browser display this string?: <b>Test</b>

<b>Password</b>