Computer Security Applicationsintermediate
Arrange the following defensive activities in a sensible sequence for improving a database-backed application after a suspected injection weakness is found: implement a fix, identify and assess the weakness, test the fix, monitor the application.
Answer
Identify and assess the weakness, Implement a fix, Test the fix, Monitor the application
Explanation
### The order
1. **Identify and assess the weakness**: understand what is vulnerable before choosing a remedy.
2. **Implement a fix**: apply an appropriate safeguard, such as parameterized queries.
3. **Test the fix**: check that the weakness is addressed and expected behavior remains.
4. **Monitor the application**: review ongoing activity because threats and conditions can change.
### Terms
- **Parameterized query**: a query approach that keeps input values separate from command structure.
### Remember
Assess first, remediate next, verify the change, then keep monitoring.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free