SSCP Systems & Application Security 2

Question 1

Which hardening technique involves disabling or removing unnecessary services, ports, and software from a system?

Accepted Answer

Reducing the attack surface

Answer

Patch management

Answer

Vulnerability scanning

Answer

Application sandboxing

Question 2

What is the primary security benefit of containerization technologies like Docker?

Accepted Answer

They isolate applications from each other and the host system

Answer

They eliminate the need for operating system patches

Answer

They automatically encrypt all application data

Answer

They prevent all forms of privilege escalation

Question 3

Which type of malware disguises itself as legitimate software to trick users into installing it?

Accepted Answer

Trojan horse

Answer

Worm

Answer

Rootkit

Answer

Ransomware

Question 4

What is 'input validation' in the context of application security?

Accepted Answer

Ensuring data entered by users meets expected format and type before processing

Answer

Verifying user credentials before granting access

Answer

Logging all user inputs for audit purposes

Answer

Encrypting user-submitted data in transit

Question 5

Which security measure involves using multiple independent systems to perform the same function to verify results?

Accepted Answer

Diversity of defense

Answer

Redundancy

Answer

Defense in depth

Answer

Failover clustering

Question 6

What is the purpose of code signing in application security?

Accepted Answer

To verify the authenticity and integrity of software using a digital signature

Answer

To encrypt the source code from unauthorized reading

Answer

To prevent reverse engineering of compiled binaries

Answer

To license software to authorized users only

Question 7

In a secure SDLC, during which phase should threat modeling ideally occur?

Accepted Answer

Design

Answer

Testing

Answer

Deployment

Answer

Maintenance