Join the discussion
Question 34/63
A public library needs to implement security control on publicly used computers to prevent illegal downloads.
Which security control would prevent this threat?
Which security control would prevent this threat?
Correct Answer: B
Authentication is the most effective control for the scenario because it directly addresses who is using the public computers:
* User Identification: Authentication requires users to identify themselves (e.g., library card, login credentials) before accessing the computers. This links actions to specific individuals, making it easier to control unauthorized activity.
* Policy Enforcement: Combined with other controls (e.g., content filtering), authentication enables the library to implement policies restricting downloads. If users violate the policy, their identities can be used for consequences.
* Deterrent: Knowing they can be identified discourages users from attempting illegal downloads.
* User Identification: Authentication requires users to identify themselves (e.g., library card, login credentials) before accessing the computers. This links actions to specific individuals, making it easier to control unauthorized activity.
* Policy Enforcement: Combined with other controls (e.g., content filtering), authentication enables the library to implement policies restricting downloads. If users violate the policy, their identities can be used for consequences.
* Deterrent: Knowing they can be identified discourages users from attempting illegal downloads.
Add Comments
- Other Question (63q)
- Q1. A new product does not display personally identifiable information, will not let private d...
- Q2. Due to positive publicity from the release of the new software product, leadership has dec...
- Q3. Which threat modeling step collects exploitable weaknesses within the product?...
- Q4. What is an advantage of using the Agile development methodology?...
- Q5. While performing functional testing of the new product from a shared machine, a QA analyst...
- Q6. Which step in the change management process includes modifying the source code?...
- Q7. Developers have finished coding, and changes have been peer-reviewed. Features have been d...
- Q8. Company leadership has contracted with a security firm to evaluate the vulnerabilityofall ...
- Q9. During fuzz testing of the new product, random values were entered into input elements Sea...
- Q10. Which secure coding best practice ensures sensitive information is not disclosed in any re...
- Q11. The scrum team decided that before any change can be merged and tested, it must be looked ...
- Q12. Automated security testing was performed by attempting to log in to the new product with a...
- Q13. Which DREAD category is based on how easily a threat exploit can be found?...
- Q14. Which category classifies identified threats that do not have defenses in place and expose...
- Q15. Which software control test examines an application from a user perspective by providing a...
- Q16. Which secure coding best practice says to require authentication before allowing any files...
- Q17. What are the three primary goals of the secure software development process?...
- Q18. What refers to the review of software source code by developers other than the original co...
- Q19. What is a countermeasure to the web application security frame (ASF) data validation/param...
- Q20. Which type of security analysis is limited by the fact that a significant time investment ...
- Q21. The security team is identifying technical resources that will be needed to perform the fi...
- Q22. What are the three primary goals of the secure software development process?...
- Q23. The security testing team received a report from one of the contracted penetration testing...
- Q24. What is the protection of information and information systems from unauthorized access, us...
- Q25. A security architect is creating a data flow diagram and draws an arrow between two circle...
- Q26. Which DKEAD category has a risk rating based on the threat exploit's potential level of ha...
- Q27. Which threat modeling step assigns a score to discovered threats?...
- Q28. Which type of threat exists when an attacker can intercept and manipulate form data after ...
- Q29. Which secure coding best practice says to use well-vetted algorithms to ensure that the ap...
- Q30. The scrum team decided that before any change can be merged and tested, it must be looked ...
- Q31. Which privacy impact statement requirement type defines processes to keep personal informa...
- Q32. What sitsbetween a browser and an internet connection and alters requests and responses in...
- Q33. What is a countermeasure to the web application security frame (ASF) authentication threat...
- Q34. A public library needs to implement security control on publicly used computers to prevent...
- Q35. Recent vulnerability scans discovered that the organization's production web servers were ...
- Q36. Which privacy impact statement requirement type defines how personal information will be p...
- Q37. In which step of the PASTA threat modeling methodology is vulnerability and exploit analys...
- Q38. Which mitigation technique can be used to light against a threat where a user may gain acc...
- Q39. While performing functional testing of the new product from a shared machine, a QA analyst...
- Q40. Using a web-based common vulnerability scoring system (CVSS) calculator, a security respon...
- Q41. While performing functional testing of the new product from a shared machine, a QA analyst...
- Q42. Due to positive publicity from the release of the new software product, leadership has dec...
- Q43. An individual is developing a software application that has a back-end database and is con...
- Q44. Which SDL security goal is defined as ensuring timely and reliable access to and use of in...
- Q45. A recent vulnerability scan uncovered an XML external entity (XXE) Haw that could allow at...
- Q46. Which type of threat exists when an attacker can intercept and manipulate form data after ...
- Q47. Which secure coding best practice says to assume all incoming data should be considered un...
- Q48. Which threat modeling step collects exploitable weaknesses within the product?...
- Q49. Which secure coding best practice says to only use tested and approved components and use ...
- Q50. The organization has contracted with an outside firm to simulate an attack on the new soft...
- Q51. During fuzz testing of the new product, random values were entered into input elements Sea...
- Q52. Which type of security analysis is performed by reviewing source code line-by-line after o...
- Q53. The organization is moving from a waterfall to an agile software development methodology, ...
- Q54. A new product does not display personally identifiable information, will not let private d...
- Q55. The security team contracts with an independent security consulting firm to simulate attac...
- Q56. Which SDL security goal is defined as ensuring timely and reliable access to and use of in...
- Q57. What is the privacy impact rating of an application that stores personally identifiable in...
- Q58. The security team is reviewing whether changes or open issues exist that would affect requ...
- Q59. Which type of security analysis is performed by injecting malformed data into open interfa...
- Q60. Which secure software design principle assumes attackers have the source code and specific...
- Q61. Which architecture deliverable identifies the organization's tolerance to security issues ...
- Q62. Which secure coding best practice says to use a single application-level authorization com...
- Q63. An individual is developing a software application that has a back-end database and is con...
[×]
Download PDF File
Enter your email address to download WGU.Secure-Software-Design.v2026-07-14.q63.pdf
