Online Access Free Secure-Software-Design Practice Test

What is a countermeasure to the web application security frame (ASF) authentication threat category?

• A.Sensitive information is scrubbed from error messages
• B.Cookies have expiration timestamps.
• C.Credentials and tokens are encrypted.
• D.Role-based access controls restrict access

What is one of the tour core values of the agile manifesto?

• A.Business people and developers must work together daily throughout the project.
• B.Individuals and interactions over processes and tools
• C.Communication between team members
• D.Teams should have a dedicated and open workspace.

Which secure coding practice involves clearing all local storage as soon as a user logs of for the night and will automatically log a user out after an hour of inactivity?

• A.System configuration
• B.Communication security
• C.Session management
• D.Access control

Which concept is demonstrated when every module in a particular abstraction layer of a computing environment can only access the information and resources that are necessary for its legitimate purpose?

• A.Principle of Least Privilege
• B.Privacy
• C.Confidentiality
• D.Elevation of Privilege

What refers to the review of software source code by developers other than the original coders to try to identify oversights, mistakes, assumptions, a lack of knowledge, or even experience?

• A.Dynamic code review
• B.User acceptance testing
• C.Fault injection
• D.Manual peer review