Which of the following is the MOST effective method of mitigating data theft from an active user
workstation?

Which of the following protocols would allow an organization to maintain a centralized list of users
that can read a protected webpage?

The BEST method to mitigate the risk of a dictionary attack on a system is to

Which of the following is an advantage of on-premise Credential Management Systems?

Which of the following prevents improper aggregation of privileges in Role Based Access Control
(RBAC)?

The implementation of which features of an identity management system reduces costs and
administration overhead while improving audit and accountability?

Which of the following is the BEST method to assess the effectiveness of an organization’s
vulnerability management program?

Which methodology is recommended for penetration testing to be effective in the development
phase of the life-cycle process?

Which of the following is most helpful in applying the principle of LEAST privilege?

DRAG DROP
A software security engineer is developing a black box-based test plan that will measure the
system’s reaction to incorrect or illegal inputs or unexpected operational errors and situations.
Match the functional testing techniques on the left with the correct input parameters on the right.