Application Security: Techniques And Best Practices » Week 4 » Security Best Practices In Google Cloud

Q: Which TWO of the following statements about Application Security are TRUE?

Correct! Attackers know that the security of an application is often undefined and remains untested. <br> Correct! Attackers will target web applications in order to steal or modify weakly-protected data to facilitate credit card fraud, identity theft, or other data and identity crimes.

Q: Which TWO of the following vulnerabilities are scanned for when you use Web Security Scanner?

Correct! Web Security Scanner will check your code libraries to make sure they are current and secure. <br> Correct! Web Security Scanner will find instances in your applications where HTTP and HTTPS calls are mixed.

Q: Which TWO of the following statements are TRUE when discussing the threat of OAuth and Identity Phishing?

Correct! While a small piece of personal data may not be enough on its own to allow a phisher to obtain access to a user's more sensitive data, over time these small bits can often be combined to allow user accounts to be compromised. <br> Correct! Some social sites allow users to "link" their accounts on other sites - for example, gaming sites - and that link can often be exploited.