2.3 Application Development, Deployment, Automation Concepts

Question 1

The practice of developing apps in an isolated testing environment with no internet or external connections.

Answer 1

Sandboxing

Question 2

What two steps are critical to perform before having a new application go live?

Answer 2

Quality assurance

staging

Question 3

These are created in order to define the security of a newly developed application. Involves proper security settings, patches, and updating. Integrity measurements should check for this configuration.

Answer 3

Secure Baseline

Question 4

The process of deploying an application and configuring all security parameters.

Answer 4

Provisioning

Question 5

The ability for an appolication to handle varying workloads and adjust the necessary system resources accordingly.

Answer 5

Scalability and elasticity

Question 6

The process of managing the automation and overall managment of cloud application instances and security policies.

Answer 6

Orchestration

Question 7

Process of dismantaling and removing application instances, taking particular care to ensure the security of the process.

Answer 7

Deprovisioning

Question 8

These procedures in a SQL database restrict the user to what kinds of queries and commands they can perform in order to limit the possiblity of harmful queries taking place.

Answer 8

Stored procedures

Question 9

The process of obscuring code in order to make it unreadable to an attacker.

Answer 9

Obfuscation

Question 10

Why does code reuse pose security concerns?

Answer 10

If the original code has vulnerabilities they are copied

Question 11

Code that is used, results are tallied, but then not used anywhere else in the app yet not taken care of properly.

Answer 11

Dead code

Question 12

The process of verifying all input into a program to protect against app input attacks.

Answer 12

Input validation

Question 13

What type of attack can poor memory management lead to?

Answer 13

Buffer overflow

Question 14

Must be taken into consideration when your app is handling lots of sensitive data like PII and credit card info.

Answer 14

Data exposure

Question 15

The process of making, documenting, and implementing changes to an application which can help with security analysis. Allows you to revert software to a previous version in the event a new change does not go as planned.

Answer 15

Version control

Question 16

The practice of using alternative compiler paths for an application in order to change the binary of each application. Attacks on a particular binary stop with that binary and they cannot attack other versions on different binaries.

Answer 16

Software diversity

Question 17

The process of code being constantly written and merged into an apps central repository, often mulitple times a day. Security becomes a major concern.

Answer 17

Continuous integration