Which attack exploits input validation vulnerabilities?

You are a security analyst, and you receive a text message alerting you of a possible attack. Which security control is the least likely to produce this type of alert?

SQL injection inserts a code fragment that makes a database statement universally true, like _.

Which type of security assessment requires access to source code?

Which option is an open-source solution to scanning a network for active hosts and open ports?

When implementing a data loss prevention (DLP) strategy, what is the first step in the process?

You have recovered a server that was compromised in a malware attack to its previous state. What is the final step in the incident response process?

Sharing account credentials violates the _ aspect of access control.

You are responsible for managing security of your organization's public cloud infrastructure. You need to implement security to protect the data and applications running in a variety of IaaS and PaaS services, including a new Kubernetes cluster. What type of solution is best suited to this requirement?

The DLP project team is about to classify your organization's data. Whats is the primary purpose of classifying data?

Which type of vulnerability cannot be discovered in the course of a typical vulnerability assessment?