Domain 6: (Security Assessment and Testing)

Question 1

What are some tools of security assessment and testing programs for validating security controls?

Answer 1

Vulnerability Assessments
Penetration tests, Software testing
Audits
Security Management Tasks

Question 2

What uses automated tools to search for known vulnerabilities in systems, apps, and networks?

Answer 2

Vulnerability Assessments

Question 3

What uses the same tools as vulnerability assessment systems but supplements them with attack techniques where an assessor attempts to exploit vulnerabilities and gain access to the sys.

Answer 3

Penetration Tests

Question 4

What are some penetration testing strategies?

Answer 4

War Dialing
Sniffing
Eavesdropping
Dumpster Diving
Social Engineering

Question 5

What describes techniques to verify that code functions as designed and does not contain security flaws?

Answer 5

Software Testing

Question 6

What uses a peer review process to formally or informally validate code before deploying it in production?

Answer 6

Code Review

Question 7

What assesses the interactions between components and users with API testing, user interface testing, and physical interface testing?

Answer 7

Interface Testing

Question 8

What technique includes code reviews, and evaluates the security of software without running it by analyzing either the source code or the compiled app?

Answer 8

Static Software Testing

Question 9

What technique evaluates the security of software in a runtime environment and is often the only option for orgs deploying apps written by someone else?

Answer 9

Dynamic Software Testing

Question 10

What uses modified inputs to test software performance, modifies known inputs to generate synthetic inputs that may trigger unexpected behavior, and develops inputs based on models of expected inputs to perform same tasks?

Answer 10

Fuzzing

Question 11

What are some security management oversight techniques?

Answer 11

Log Reviews
Account Management Reviews
Backup Verification
Key Performance and Risk Indicators