CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ197

VerifiedSecure Software Architecture and Design

Several security patterns for web applications were developed under the DARPA contract by Kienzle, Elder, Tyree, and Edwards-Hewitt. Which of the following patterns apply to aspects of authentication in web applications? Each correct answer represents a complete solution. Choose all that apply.

Choose four
Explanation

Authenticated Session maintains an authenticated user’s state across restricted pages. Password Authentication addresses secure use and handling of passwords, Account Lockout limits unsuccessful attempts to resist password-guessing attacks, and Password Propagation ensures credentials are verified for access to a user’s data. Secure Assertion and Partitioned Application concern broader software-assurance design rather than authentication.

Community Discussion

No comments yet. Be the first to start the discussion!