A team has identified an abuse case where an attacker can upload a malicious file to a public file-sharing application. The team wants to write a security use case that directly addresses this threat. Which of the following is the most appropriate security use case?

The system shall log all uploads with the user's IP address and timestamp.

The system shall display a warning to users that uploading malicious files is prohibited.

The system shall compress all uploaded files to reduce storage usage.

The system shall validate file type, size, and content before accepting an upload, and store files in a sandboxed location.

EC-CouncilCertified Application Security Engineer (.NET)

Domain 2Objective 2

Abuse Case and Security Use Case Modeling CASENET Practice Questions (Page 10)

Part of the Security Requirements and Secure Design domain, which makes up ~21% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–17 in this domain), expect 2–2 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

7concepts

Questions 46–46

46application · medium
A team has identified an abuse case where an attacker can upload a malicious file to a public file-sharing application. The team wants to write a security use case that directly addresses this threat. Which of the following is the most appropriate security use case?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CASENET

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.

Abuse Case and Security Use Case Modeling CASENET Practice Questions (Page 10)

Questions 46–46

A team has identified an abuse case where an attacker can upload a malicious file to a public file-sharing application. The team wants to write a security use case that directly addresses this threat. Which of the following is the most appropriate security use case?

Keep studying — Security Requirements and Secure Design