Definitions

Question 1

Mobile Code

Answer 1

Code that can be transmitted across a network, to be executed by a system or device on the other end.

Harris, Shon (2013-09-16). CISSP Boxed Set, Second Edition (All-in-One) (Kindle Locations 23624-23625). McGraw-Hill Education. Kindle Edition.

Question 2

Java Applets

Answer 2

Small components (applets) that provide various functionalities and are delivered to users in the form of Java bytecode. Java applets can run in a web browser using a Java Virtual Machine (JVM). Java is platform independent; thus, Java applets can be executed by browsers for many platforms.

Harris, Shon (2013-09-16). CISSP Boxed Set, Second Edition (All-in-One) (Kindle Locations 23625-23627). McGraw-Hill Education. Kindle Edition.

Question 3

Sandbox

Answer 3

A virtual environment that allows for very fine-grained control over the actions that code within the machine is permitted to take. This is designed to allow safe execution of untrusted code from remote sources.

Harris, Shon (2013-09-16). CISSP Boxed Set, Second Edition (All-in-One) (Kindle Locations 23628-23629). McGraw-Hill Education. Kindle Edition.

Question 4

ActiveX

Answer 4

A Microsoft technology composed of a set of OOP technologies and tools based on COM and DCOM. It is a framework for defining reusable software components in a programming language-independent manner.

Harris, Shon (2013-09-16). CISSP Boxed Set, Second Edition (All-in-One) (Kindle Locations 23629-23631). McGraw-Hill Education. Kindle Edition.

Question 5

Authenticode

Answer 5

A type of code signing, which is the process of digitally signing software components and scripts to confirm the software author and guarantee that the code has not been altered or corrupted since it was digitally signed. Authenticode is Microsoft’s implementation of code signing.

Harris, Shon (2013-09-16). CISSP Boxed Set, Second Edition (All-in-One) (Kindle Locations 23632-23633). McGraw-Hill Education. Kindle Edition.