Exam (elaborations)

WGU D385 LOGGING AND SECURITY ISSUES OBJECTIVE ASSESSMENT EXAM 2024/ ACTUAL EXAM TEST BANK WITH 250 QUESTIONS AND CORRECT DETAILED ANSWERS/ WGU D385 OA EXAM /ALREADY GRADED A+

0 purchase

Module
WGU D385 LOGGING AND SECURITY ISSUES OBJECTIVE ASS

Institution
WGU D385 LOGGING AND SECURITY ISSUES OBJECTIVE ASS

WGU D385 LOGGING AND SECURITY ISSUES OBJECTIVE ASSESSMENT EXAM 2024/ ACTUAL EXAM TEST BANK WITH 250 QUESTIONS AND CORRECT DETAILED ANSWERS/ WGU D385 OA EXAM /ALREADY GRADED A+ What happens if a cookie is set without a max-age directive? - ...ANS:->>>...The browser will automatically ...

[Show more]

Preview 4 out of 89 pages

View example

Uploaded on August 3, 2024
Number of pages 89
Written in 2024/2025
Type Exam (elaborations)
Contains Questions & answers

wgu d385 logging and security issues objective ass

Institution WGU D385 LOGGING AND SECURITY ISSUES OBJECTIVE ASS
Module WGU D385 LOGGING AND SECURITY ISSUES OBJECTIVE ASS

PurityKauri

Member since 1 year 644 documents sold

£17.59

Add to cart

Add to wishlist

100% satisfaction guarantee
Immediately available after payment
Both online and in PDF
No strings attached

WGU D385 LOGGING AND SECURITY ISSUES
OBJECTIVE ASSESSMENT EXAM 2024/ ACTUAL
EXAMTEST BANK WITH 250 QUESTIONS AND
CORRECTDETAILED ANSWERS/ WGU D385 OA
EXAM 2024-2025/ALREADY GRADED A+

What happens if a cookie is set without a max-age directive?

- ...ANS:->>>...The browser will automatically use a browser-length session

where the browser keeps the cookiealive for as long as the tab stays open.

What do simple cache-based sessions do? -

...ANS:->>>...Allow you to store session state in a cache service like

Memcached or Redis. A cache service is fast,but data can potentially be

lost. Because these are sessionstates, data loss can just mean the user logs in

again.

What do write-through cache-based sessions do? -

...ANS:->>>...Allow you to combine a cache service and adatabase to

manage session state. When Django writes sessions state to the cache, it'll

also write through to the database.

What does Django use the SECRET_KEY setting for? -

...ANS:->>>...Keyed hashing (not encryption)

What is salting? - ...ANS:->>>...A way to compute a different hash value

,from two or more identical messages.

East message is paired with a unique salt (a random string of bytes).

What is the safest way to hash passwords? Why? -

...ANS:->>>...Key Derivation Functions (KDFs). These functions consume a

lot of resources and are slow, making them much more difficult to crack. You

determine how slowit is by adjusting the configuration parameters you give it

What is the most widely used KDF (key derivative function)in Python? What is

the newer better replacement for it? -

...ANS:->>>...PBKDF2 (password-based key derivative function 2) is the

old standard, Argon2 is the replacement(uses memory intensiveness in

addition to the classic computational intensiveness).

What is the difference between authorization and authentication? - ...ANS:-

>>>...Authentication relates to who a user is. Authorization relates to what a

user can do.

What is a permission? - ...ANS:->>>...The most atomic formof authorization. It

allows a person, or group of people, to doone and only one thing.

What are groups for? - ...ANS:->>>...Groups provide a wayto associate a set

of permissions with a set of users.

,What is OAuth2? - ...ANS:->>>...An industry standard authorization protocol

that enables users to authorize third-party access to protected resources

without exposing their credentials to the third party. (Ex: log in with Google)

What penetration test involves attempting to have users divulge sensitive

information - ...ANS:->>>...Social engineering test

What is remote dial-up war dialing? - ...ANS:->>>...A security testing

technique used to identify and assess the vulnerability of remote access systems,

such as modems or remote access servers, to unauthorized access. Countless

attempts (brute force) to connect to modems are made in thistest.

What does a web application penetration test do? -

...ANS:->>>...Aims to identify gaps in components that house web

application resources, such as the source code.

What is HTML-injection? - ...ANS:->>>...An attacker injects malicious

HTML code in web applications that canaccept user input (like forms). These

attacks exploit forms that take input without properly validating or sanitizing

theinput.

What tests are involved in mobile application penetrationtesting? - ...ANS:-

, >>>...1. Static analysis- extracting elements (metadata and source code)

and using them to perform reverse engineering.

2. Dynamic analysis- finding vulnerabilities while theapplication is

running on the device.

What steps are involved in web application penetration testing? -

...ANS:->>>...Reconnaissance- gathering infoabout the OS, services, and

resources being used.

Discovery- attempting to find vulnerabilities.

Exploit- using the vulnerabilities to gain unauthorizedaccess to sensitive data

or systems.

What is data integrity? - ...ANS:->>>...Ensures that data is free of accidental

corruption. Verifies the data is read just as it was written answers the question

"Has the data changes?"

What is data authentication? - ...ANS:->>>...Ensures that thedata reader can

verify the identity of the data writer.

Answersthe question "Who authored this data?"

What is nonrepudiation? - ...ANS:->>>...The assurance thatan individual or

organization has no way of denying their actions. Answersthe question "Who

did what?"

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

You can quickly pay through credit card for the summaries. There is no membership needed.

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller PurityKauri. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for £17.59. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

68175 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy revision notes and other study material for 15 years now

Start selling

Exam (elaborations)

WGU D385 LOGGING AND SECURITY ISSUES OBJECTIVE ASSESSMENT EXAM 2024/ ACTUAL EXAM TEST BANK WITH 250 QUESTIONS AND CORRECT DETAILED ANSWERS/ WGU D385 OA EXAM /ALREADY GRADED A+

Document information

Subjects

Written for

Seller

Reviews received

Content preview