Security by Design ECDE Practice Questions (Page 9)

Questions 41–44

1. 41expert · hard

   A team is designing a new feature that allows users to export their personal data. The threat model identifies that an attacker could request another user's data by manipulating the export request. The team must define a security requirement with acceptance criteria. Which requirement is the MOST effective?

   • AThe system must rate-limit export requests to prevent abuse.
   • BThe system must verify that the authenticated user owns the data being exported before processing the request.
   • CThe system must log all export requests for auditing.
   • DThe system must use HTTPS for all export requests.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A product owner wants to add a 'remember me' feature to a web application. The security team needs to define acceptance criteria for this feature. Which acceptance criterion is most security-relevant?

   • AThe feature must be implemented using a popular JavaScript library
   • BThe 'remember me' token must be invalidated after password change or logout
   • CThe feature must store the token in a cookie with a long expiration
   • DThe feature must work on all major browsers
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A product team is designing a new mobile app that will store user health data. The security team wants to define acceptance criteria for data protection. Which criterion is most important to include?

   • AThe app must use a custom encryption algorithm to avoid detection
   • BThe app must encrypt health data at rest using a key stored in the device's secure enclave
   • CThe app must allow users to export their health data in plain text
   • DThe app must store health data in a cloud database with encryption at rest
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A company is designing a new system that will store sensitive customer data. The security architect wants to apply the principle of least privilege to the database access. Which of the following is the BEST approach?

   • AUse database views to restrict access to sensitive columns, but keep a single account.
   • BCreate separate database accounts for each application service, granting only the permissions required for that service's functions.
   • CGrant all services read and write access to all tables to avoid access errors.
   • DUse a single database account with broad permissions for all services to simplify management.
   Reveal Solution Discussion Select an answer first