QUESTION: 269

A developer is reviewing the following transaction logs from a web application:

Username: John Doe
Street name: Main St.
Street number: <script>alert(‘test’)</alert>

Which of the following code snippets should the developer implement given the above transaction logs?

if ($input != strcmp($var1, “<>”)) {die();}
<form name =”form1” action=”/submit.php” onsubmit=”return validate()” action=POST>
$input=strip_tags(trim($_POST[‘var1’]));
<html><form name=”myform” action=”www.server.com/php/submit.php action=GET”

Answer(s): C

Reveal Solution Next Question

QUESTION: 270

A manufacturing company recently recovered from an attack on its ICS devices. It has since reduced the attack surface by isolating the affected components. The company now wants to implement detection capabilities. It is considering a system that is based on machine learning. Which of the following features would BEST describe the driver to adopt such nascent technology over mainstream commercial IDSs?

Trains on normal behavior and identifies deviations therefrom
Identifies and triggers upon known bad signatures and behaviors
Classifies traffic based on logical protocols and messaging formats
Automatically reconfigures ICS devices based on observed behavior

Answer(s): A

Reveal Solution Next Question

QUESTION: 271

An engineer is reviewing the security architecture for an enterprise network. During the review, the engineer notices an undocumented node on the network. Which of the following approaches can be utilized to determine how this node operates? (Choose two.)

Use reverse engineering and techniques
Assess the node within a continuous integration environment
Employ a static code analyzer
Review network and traffic logs
Use a penetration testing framework to analyze the node
Analyze the output of a ping sweep

Answer(s): D,E

Reveal Solution Next Question

QUESTION: 272

A security administrator is reviewing the following output from an offline password audit:

Which of the following should the systems administrator implement to BEST address this audit finding? (Choose two.)

Cryptoprocessor
Bcrypt
SHA-256
PBKDF2
Message authentication

Answer(s): B,D

Reveal Solution Next Question

Free CAS-003 Exam Braindumps (page: 68)

QUESTION: 269

QUESTION: 270

QUESTION: 271

QUESTION: 272