The difference between a GET and a POST request is
It does not matter, the web serve will treat all GET requests as POST requests
The information in a POST request cannot be manipulated. It is possible to change a GET request.
A GET request is sent when requesting information; A POST request is sent when sending information
The data is sent in the body of the POST request and in the URL in a GET request
Which of the following best describes the difference between white-box testing and black-box testing?
White-box testing is performed by an independent programmer team
Black-box testing uses the bottom-up approach
Black-box testing involves the business units
White-box testing examines the program internal logical structures
Scanning underlying source code with a database of regular expressions to quickly identify suspicious code, application inputs, outputs etc primarily relates to ..
Gray-box testing
Black-box testing
White-box testing
None of these
What is the difference between network vulnerability assessment and a penetration test?
A penetration test enumerates resources, and a vulnerability assessment enumerates vulnerabilities
They are one and the same
A penetration test identifies running services, and vulnerability assessments provide a more in-depth understanding of vulnerabilities
A penetration test exploits vulnerabilities, and a vulnerability assessment finds vulnerabilities
XSS stands for?
cross site scrpting
X site scrpting
spread sheet
Excel site scrpting
The ASAP process can applied at which phase of an application development for best results?
During testing
During development
During all phases of development starting with requirement analysis and ending with rollout
During design
In the ASAP process what is the main activity carried out in the requirement analysis phase?
Capture the customer requirements
Update the project plan
Capture and update the URS and SRS with security requirements for the project
None of the above
Who has the responsibility for remediation of the security vulnerabilities discovered during application security testing?
ASAP Team
Development Team
Testing Team
Project Management
What are the different types of engagement models available for ASAP?
Time and Money, Fixed price
Offshore, Onshore, Offshore-Onshore
Full-Fledged, Staggered, Fast Track
As part of ASAP what type of analysis is performed during the design and build phase?
Dynamic code analysis
Static code analysis
Both
None