One concept you should be familiar with when it comes to the security fundamentals exam is attacks surface
analysis
and attacks surface is all the different ways that an attacker could get into a system and where they
could get data out.
Knowing this information can help developers to properly secure applications to prevent attacks attack
service analysis is usually done by security architects or pen testers and it will identify what parts
of the system need to be tested for security vulnerabilities.
What areas of the code should be considered high risk as well as when you should re-evaluate the application.
Here in this article by O waspish the open web applications curity project has a lot of great information
about defining the attack surface of an application as well as identifying and mapping the attack surface.
If you want to learn more about attack surface concepts I added a link to this article in the resources
for this lecture.