CSE 110 UPDATED FINAL EXAMS ALL QUESTIONS
AND ANSWERS SURE A+
✔✔Negative Model Advantage - ✔✔Usually fewer false positives and less disruption to
normal users.
✔✔Negative Model Disadvantage - ✔✔Weak against new or unknown attacks.
✔✔Positive Security Model - ✔✔A whitelist model that allows only explicitly approved
behavior and denies everything else.
✔✔Whitelist - ✔✔A list of allowed behavior, inputs, or actions.
✔✔Positive Model Advantage - ✔✔Stronger security because unknown behavior is
denied by default.
✔✔Positive Model Disadvantage - ✔✔Hard to fully cover all valid behavior and may
block legitimate users.
✔✔Coverage Problem - ✔✔The difficulty of knowing whether all valid cases have been
accounted for.
✔✔False Positive - ✔✔A harmless or valid action that is incorrectly flagged or blocked.
,✔✔False Negative - ✔✔A harmful action that is incorrectly allowed.
✔✔Behavioral Security Model - ✔✔A model that learns normal behavior and flags
unusual outliers.
✔✔Behavioral Model Advantage - ✔✔Can adapt to changing behavior better than a
fixed blacklist.
✔✔Behavioral Model Disadvantage - ✔✔Training data may include attacks or may not
cover legitimate unusual behavior.
✔✔WAF - ✔✔Web Application Firewall; a security tool that filters web requests based
on rules or models.
✔✔Security Model Trade-Off - ✔✔Blacklist favors usability but weaker security; whitelist
favors security but may hurt usability; behavioral models depend on training quality.
✔✔Data Format - ✔✔A structured way to encode information, such as CSV, XML,
JSON, or YAML.
✔✔CSV - ✔✔Comma-separated values; simple and compact but limited in structure
and expressiveness.
✔✔XML - ✔✔A tag-based format that is verbose but structured and historically
common.
✔✔JSON - ✔✔JavaScript Object Notation; popular, readable, and common for web
data exchange.
✔✔YAML - ✔✔A human-friendly configuration format often used for project and
deployment settings.
✔✔Binary Format - ✔✔A compact machine-oriented format that may be efficient but
less human-readable.
✔✔DSL - ✔✔Domain Specific Language; a specialized language or format designed for
a specific domain.
✔✔CSS as DSL - ✔✔CSS can be viewed as a domain-specific language for styling
rather than a general programming language.
✔✔Choosing a Data Format - ✔✔The choice should be based on readability, authoring,
parsing, size, expressiveness, extension, and security.
, ✔✔JSON Is Not Always Best - ✔✔JSON may be fashionable, but it is not automatically
the correct format for every problem.
✔✔Data Format Fashion - ✔✔Choosing a format because it is trendy rather than
because it fits the task.
✔✔Ease of Authoring - ✔✔How easy it is for humans to write the format correctly.
✔✔Ease of Reading - ✔✔How easy it is for humans to understand the format.
✔✔Expressiveness - ✔✔How much meaning or structure the format can represent.
✔✔Format Size - ✔✔How compact or bulky the data format is, affecting performance
and delivery.
✔✔Ease of Extension - ✔✔How easily the format can grow or change without breaking
existing use.
✔✔Format Security - ✔✔The risk that a format or parser introduces vulnerabilities.
✔✔Configuration File - ✔✔A file used to define settings or behavior for software.
✔✔GitHub Actions YAML - ✔✔A configuration format used to define CI/CD workflows in
GitHub Actions.
✔✔Architecture Importance - ✔✔Architecture covers important decisions and hard-to-
change parts of software.
✔✔Martin Fowler Architecture Idea - ✔✔Architecture is the important stuff, especially
the hard-to-change stuff.
✔✔Greg Wilson Architecture Idea - ✔✔Software architecture describes structure,
behavior, trade-offs, and effects on maintenance or scalability.
✔✔Architecture and -ilities - ✔✔Architectural choices should be driven by the qualities
the system needs most.
✔✔Fitness for Use - ✔✔Good architecture depends on whether it fits the actual users,
context, and goals.
✔✔Architecture in Agile - ✔✔Agile does not mean no architecture; it means enough
architecture to support safe iteration.
AND ANSWERS SURE A+
✔✔Negative Model Advantage - ✔✔Usually fewer false positives and less disruption to
normal users.
✔✔Negative Model Disadvantage - ✔✔Weak against new or unknown attacks.
✔✔Positive Security Model - ✔✔A whitelist model that allows only explicitly approved
behavior and denies everything else.
✔✔Whitelist - ✔✔A list of allowed behavior, inputs, or actions.
✔✔Positive Model Advantage - ✔✔Stronger security because unknown behavior is
denied by default.
✔✔Positive Model Disadvantage - ✔✔Hard to fully cover all valid behavior and may
block legitimate users.
✔✔Coverage Problem - ✔✔The difficulty of knowing whether all valid cases have been
accounted for.
✔✔False Positive - ✔✔A harmless or valid action that is incorrectly flagged or blocked.
,✔✔False Negative - ✔✔A harmful action that is incorrectly allowed.
✔✔Behavioral Security Model - ✔✔A model that learns normal behavior and flags
unusual outliers.
✔✔Behavioral Model Advantage - ✔✔Can adapt to changing behavior better than a
fixed blacklist.
✔✔Behavioral Model Disadvantage - ✔✔Training data may include attacks or may not
cover legitimate unusual behavior.
✔✔WAF - ✔✔Web Application Firewall; a security tool that filters web requests based
on rules or models.
✔✔Security Model Trade-Off - ✔✔Blacklist favors usability but weaker security; whitelist
favors security but may hurt usability; behavioral models depend on training quality.
✔✔Data Format - ✔✔A structured way to encode information, such as CSV, XML,
JSON, or YAML.
✔✔CSV - ✔✔Comma-separated values; simple and compact but limited in structure
and expressiveness.
✔✔XML - ✔✔A tag-based format that is verbose but structured and historically
common.
✔✔JSON - ✔✔JavaScript Object Notation; popular, readable, and common for web
data exchange.
✔✔YAML - ✔✔A human-friendly configuration format often used for project and
deployment settings.
✔✔Binary Format - ✔✔A compact machine-oriented format that may be efficient but
less human-readable.
✔✔DSL - ✔✔Domain Specific Language; a specialized language or format designed for
a specific domain.
✔✔CSS as DSL - ✔✔CSS can be viewed as a domain-specific language for styling
rather than a general programming language.
✔✔Choosing a Data Format - ✔✔The choice should be based on readability, authoring,
parsing, size, expressiveness, extension, and security.
, ✔✔JSON Is Not Always Best - ✔✔JSON may be fashionable, but it is not automatically
the correct format for every problem.
✔✔Data Format Fashion - ✔✔Choosing a format because it is trendy rather than
because it fits the task.
✔✔Ease of Authoring - ✔✔How easy it is for humans to write the format correctly.
✔✔Ease of Reading - ✔✔How easy it is for humans to understand the format.
✔✔Expressiveness - ✔✔How much meaning or structure the format can represent.
✔✔Format Size - ✔✔How compact or bulky the data format is, affecting performance
and delivery.
✔✔Ease of Extension - ✔✔How easily the format can grow or change without breaking
existing use.
✔✔Format Security - ✔✔The risk that a format or parser introduces vulnerabilities.
✔✔Configuration File - ✔✔A file used to define settings or behavior for software.
✔✔GitHub Actions YAML - ✔✔A configuration format used to define CI/CD workflows in
GitHub Actions.
✔✔Architecture Importance - ✔✔Architecture covers important decisions and hard-to-
change parts of software.
✔✔Martin Fowler Architecture Idea - ✔✔Architecture is the important stuff, especially
the hard-to-change stuff.
✔✔Greg Wilson Architecture Idea - ✔✔Software architecture describes structure,
behavior, trade-offs, and effects on maintenance or scalability.
✔✔Architecture and -ilities - ✔✔Architectural choices should be driven by the qualities
the system needs most.
✔✔Fitness for Use - ✔✔Good architecture depends on whether it fits the actual users,
context, and goals.
✔✔Architecture in Agile - ✔✔Agile does not mean no architecture; it means enough
architecture to support safe iteration.
