Master ISC2 CCSP Exam with Reliable Practice Questions
Upgrade to Premium
Web application firewalls (WAFs) are designed primarily to protect applications from common attacks like:
Correct : C
WAFs detect how the application interacts with the environment, so they are optimal for detecting and refuting things like SQL injection and XSS. Password cracking, syn floods, and ransomware usually aren't taking place in the same way as injection and XSS, and they are better addressed with controls at the router and through the use of HIDS, NIDS, and antimalware tools.
Start a Discussions
APIs are defined as which of the following?
Correct : B
All the answers are true, but B is the most complete.
Start a Discussions
Which of the following best describes data masking?
Correct : A
All of these answers are actually correct, but A is the best answer, because it is the most general, includes the others, and is therefore the optimum choice. This is a good example of the type of question that can appear on the actual exam.
Start a Discussions
Which of the following best describes a sandbox?
Correct : A
Options C and B are also correct, but A is more general and incorporates them both. D is incorrect, because sandboxing does not take place in the production environment.
Start a Discussions
A localized incident or disaster can be addressed in a cost-effective manner by using which of the following?
Correct : C
Joint operating agreements can provide nearby relocation sites so that a disruption limited to the organization's own facility and campus can be addressed at a different facility and campus. UPS and generators are not limited to serving needs for localized causes. Regulations do not promote cost savings and are not often the immediate concern during BC/DR activities.
Start a Discussions