Study guide 11: Application security
Domain 4: Security Operations · Not started
Main exam topics
Hardening; asset and vulnerability management; monitoring and alerting; identity and access management; automation; firewalls and endpoint protection; log interpretation; incident detection, containment, eradication and recovery; forensic evidence and chain of custody.
SY0-701 topic overview · Independent study resource, not a prediction of exam questions.
Lesson plan · 60 minutes
By the end of this lesson you will be able to:
- Replace insecure protocols with secure alternatives
- Apply input validation, secure cookies and code signing
- Explain sandboxing and secure development practices
- Protect web apps with WAFs and secure headers
Topic 11A — Protocol baselines
Use secure versions: HTTPS (443) over HTTP, SSH/SFTP over Telnet/FTP, LDAPS (636) over LDAP, SNMPv3 over v1/v2, DNSSEC to authenticate DNS answers, S/MIME or TLS for email, and secure NTP. Disable outdated TLS versions and weak cipher suites.
Topic 11B — Web and cloud application security
Validate all input on the server side; use parameterized queries against injection; encode output against XSS. Mark cookies Secure and HttpOnly. Sign code so users can verify the publisher. Use static and dynamic analysis, fuzzing, and sandboxing to contain untrusted code. Error messages should not leak details. Protect APIs with authentication and rate limiting; place a WAF in front of web apps.
Saved