EC-CouncilCertified Application Security Engineer (.NET)
Domain 1Objective 4
Software Security Standards, Models, and Frameworks CASENET Practice Questions (Page 5)
Part of the Application Security Foundations domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 68 practice questions to prepare you well beyond it. (estimate)
68questions here
14free pages
22concepts
Questions 21–25
- 21
Which security model is primarily focused on protecting integrity?
Select an answer first - 22
Which of the following is a component of the ISO/IEC 27034-1 framework?
Select an answer first - 23
What is the primary purpose of software security standards in the context of application development?
Select an answer first - 24
A .NET web application stores user session tokens in cookies without setting the Secure or HttpOnly flags. During a security review, the team identifies that an attacker could steal these tokens via a cross-site scripting (XSS) flaw. Which OWASP Top 10 risk category directly applies to this situation, and which identifier would be used to track the underlying flaw in a vulnerability database?
Select an answer first - 25
A security consulting firm wants to benchmark their client's software security initiatives against industry best practices and identify areas for improvement. They need a framework that is based on observed practices from many organizations. Which framework is most appropriate?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.