Please solve All the Questions carefully OR do not answer anything someone else will... Thanks in advance

11- Which of the following methods would a malicious outsider use to gain access to a company's external-facing webmail portal without locking out any account? A) Brute force attack B) Dictionary attack C) Rainbow table D) SQL injection 12- An outside testing company performing black box testing against a new application determines it is possible to enter any characters into the application's web-based form. Which of the following controls should the application developers use to prevent this from occurring? A) CSRF prevention B) Sandboxing C) Fuzzing D) Input validation 13- A system administrator must protect a system to ensure passwords cannot be easily guessed. Which of the following solutions BEST address the risk? (Select two answers) A) Implement password complexity B) Set password reuse to one C) Set password expiration D) Set password history to two E) Set minimum password length to 12 ) Ensure password in encrypted 14- A new enterprise application undergoing implementation needs to access and authenticate the corporate LDAP server. Which of the following is the MOST secure option to enable the application to connect to LDAP? A) Anonymous binding B) SSL over port 636 C) Site-to-site VPN D) Strong authentication 15- A programmer has allocated a 100-character array variable, which will store a user-supplied input field. This application is susceptible to which of the following types of attack if the programmer fails to property the input? Select two answers) A) XML injection B) Header manipulation C) Buffer overflow D) Arbitrary code execution E) Integer overflow