CAS-001 · Question #89
Which of the following are security components provided by an application security library or framework? (Select THREE).
The correct answer is C. Input validation D. Secure logging F. Encryption and decryption. Application security libraries and frameworks (such as OWASP ESAPI) are designed to give developers pre-built, tested security functions they can call rather than writing them from scratch. Input validation (C) protects against injection and malformed data. Secure logging (D)…
Question
Which of the following are security components provided by an application security library or framework? (Select THREE).
Options
- AAuthorization database
- BFault injection
- CInput validation
- DSecure logging
- EDirectory services
- FEncryption and decryption
How the community answered
(55 responses)- A5% (3)
- B2% (1)
- C85% (47)
- E7% (4)
Explanation
Application security libraries and frameworks (such as OWASP ESAPI) are designed to give developers pre-built, tested security functions they can call rather than writing them from scratch. Input validation (C) protects against injection and malformed data. Secure logging (D) ensures audit trails are captured without inadvertently logging sensitive data like passwords or tokens. Encryption and decryption (F) provides tested cryptographic routines for protecting data at rest and in transit. An authorization database (A) is a separate infrastructure component, not a library function. Fault injection (B) is a testing technique used to probe resilience, not a component a security library provides at runtime. Directory services (E) are a separate identity infrastructure component (e.g., LDAP/Active Directory), not part of an application security framework.
Topics
Community Discussion
No community discussion yet for this question.