1. What is online security? Why is it important to web and mobile applications? 2. Who is an online security specialist? What are their major concerns? 3. Describe the security threat model. 4. How can attackers use spoofing to attack a victim of a web or mobile application? 5. How can attackers tamper with data when attacking a web or mobile application? 6. How can attackers use repudiation to attack a web or mobile application? 7. How can attackers violate information disclosure when attacking a web or mobile application? 8. How can attackers deny service to victims during an attack on a web or mobile application? 9. How can attackers elevate privileges to attack a web or mobile application? 10. What general Internet technical and non-technical threats should security specialists set controls to protect against? 11. Describe how security specialists use governance and risk management policies to permeate security throughout an organization. 12. Describe how security specialists secure information assets through classification labeling and handling. 13. Describe how security specialists employ principles and technologies to securely engineer systems. 14. Describe how security specialists secure networks and communications systems with hardware and network configurations. 15. Describe how security specialists can authenticate users in different ways. 16. Describe how security specialists monitor systems and handle attack incidents. 17. Describe how security specialists work with software engineers to develop secure web and mobile applications