Online Access Free Secure-Software-Design Practice Test

Which design and development deliverable contains the results of each type of evaluation that was performed and the type and number of vulnerabilities discovered?

• A.Security testing reports
• B.Privacy compliance report
• C.Security test execution report
• D.Remediation report

What is one of the tour core values of the agile manifesto?

• A.Individuals and interactions over processes and tools
• B.Teams should have a dedicated and open workspace.
• C.Business people and developers must work together daily throughout the project.
• D.Communication between team members

Which mitigation technique can be used to light against a threat where a user may gain access to administrator level functionality?

• A.Encryption
• B.Quality of service
• C.Hashes
• D.Run with least privilege

The organization is moving from a waterfall to an agile software development methodology, so the software security group must adapt the security development life cycle as well. They have decided to break out security requirements and deliverables to fit better in the iterative life cycle by defining every-sprint requirements, one- time requirements, bucket requirements, and final security review requirements.
Which type of requirement slates that the team must identify primary security and privacy contacts?

• A.Every-sprint requirement
• B.One-time requirement
• C.Final security review requirement
• D.Bucket requirement

In which step of the PASTA threat modeling methodology will the team capture infrastructure, application, and software dependencies?

• A.Attack modeling
• B.Define objectives
• C.Define technical scope
• D.Risk and impact analysis