A. relying only on obscurity B. using one password everywhere C. using multiple layers of controls so failure of one control does not expose the whole system D. disabling backups
Correct Answer: C. using multiple layers of controls so failure of one control does not expose the whole system
A. only selecting fonts B. ignoring threat models C. only checking spelling D. examining architecture to identify security weaknesses before implementation
Correct Answer: D. examining architecture to identify security weaknesses before implementation
A. a password reuse policy B. a web session model C. an integrity-only accounting model D. a confidentiality model focused on preventing unauthorized information disclosure
Correct Answer: D. a confidentiality model focused on preventing unauthorized information disclosure
A. relying only on obscurity B. disabling backups C. using multiple layers of controls so failure of one control does not expose the whole system D. using one password everywhere
Correct Answer: C. using multiple layers of controls so failure of one control does not expose the whole system
A. ignoring threat models B. only selecting fonts C. only checking spelling D. examining architecture to identify security weaknesses before implementation
Correct Answer: D. examining architecture to identify security weaknesses before implementation
A. a browser caching rule B. a confidentiality-only model C. an integrity model based on well-formed transactions and separation of duties D. a network routing protocol
Correct Answer: C. an integrity model based on well-formed transactions and separation of duties
A. relying only on obscurity B. disabling backups C. using multiple layers of controls so failure of one control does not expose the whole system D. using one password everywhere
Correct Answer: C. using multiple layers of controls so failure of one control does not expose the whole system
A. publishing unreviewed code B. random coding without planning C. an organized sequence for translating requirements into architecture and detailed design D. testing after deletion
Correct Answer: C. an organized sequence for translating requirements into architecture and detailed design
A. an integrity model based on well-formed transactions and separation of duties B. a network routing protocol C. a confidentiality-only model D. a browser caching rule
Correct Answer: A. an integrity model based on well-formed transactions and separation of duties