2.1.E.2Risk avoidance stops the activity that is generating the risk. If the activity is a critical part of an organization’s mission or purpose, then avoidance is not possible.Learning objective: Identify strategies for managing risk.
5.5.B.2When creating a program that takes user input, programmers should use a function to verify that user input meets their expected criteria and does not include any control characters that could be used to manipulate the system.…Learning objective: Explain how user input sanitization protects applications.
AP Networking alignment
4.5.A.1Unauthorized access, data exposure, or disruption of services can result from accidental or intentional misuse of systems by users. These impacts may occur when individuals access resources beyond their role, mishandle data,…Learning objective: Identify the impacts of common threats and vulnerabilities in a managed network.
4.5.B.4Security controls to limit the impact of unauthorized access include: • enforcing strong password policies and account lockout settings • applying the principle of least privilege • implementing segmentation to restrict access…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a managed network.