Free Preparation Discussions
MENU
ISC2 CSSLP Exam - Topic 4 Question 57 Discussion
Topic #: 4
A number of security patterns for Web applications under the DARPA contract have been developed by Kienzle, Elder, Tyree, and Edwards-Hewitt. Which of the following patterns are applicable to aspects of authentication in Web applications?b Each correct answer represents a complete solution. Choose all that apply.
The various patterns applicable to aspects of authentication in the Web applications are as follows:
Account lockout: It implements a limit on the incorrect password attempts to protect an account from automated password-guessing
attacks.
Authenticated session: It allows a user to access more than one access-restricted Web page without re-authenticating every page. It
also integrates user authentication into the basic session model.
Password authentication: It provides protection against weak passwords, automated password-guessing attacks, and mishandling of
passwords.
Password propagation: It offers a choice by requiring that a user's authentication credentials be verified by the database before
providing access to that user's data.
Answer B and C are incorrect. Secure assertion and partitioned application patterns are applicable to
software assurance in general.
Stephanie
5 months agoTheresia
5 months agoNathan
6 months agoJina
6 months agoHaydee
6 months agoChan
6 months agoRessie
6 months agoTasia
6 months agoWade
6 months agoYaeko
6 months agoAshley
6 months agoVicente
6 months agoBev
6 months agoCarli
7 months ago