Question 1

Which secure coding best practice says to only use tested and approved components and use task-specific, built-in APIs to conduct operating system functions?

Options :

A : Session Management

B : Authentication and Password Management

C : Data Protection

D : General Coding Practices

Answer: D

Question 2

Automated security testing was performed by attempting to log in to the new product with a known username using a collection of passwords. Access was granted after a few hundred attempts. How should existing security controls be adjusted to prevent this in the future?

Options :

A : Ensure passwords are encrypted when stored in persistent data stores

B : Ensure authentication controls are resistant to brute force attacks

C : Ensure strong password policies are enforced

D : Ensure credentials and authentication tokens are encrypted during transit

Answer: B

Question 3

Which software-testing technique can be automated or semi-automated and provides invalid, unexpected, or random data to the inputs of a computer software program?

Options :

A : Fuzzing

B : Static analysis

C : Dynamic analysis

D : Bugtraq

Answer: A

Question 4

Company leadership has discovered an untapped revenue stream within its customer base and wants to meetwith IT to share its vision for the future and determine whether to move forward.Which phase of the software development lifecycle (SDLC) is being described?

Options :

A : Implementation

B : Design

C : Planning

D : Requirements

Answer: C

Question 5

Which security assessment deliverable identities unmanaged code that must be kept up to date throughout the life of the product?

Options :

A : Threat profile

B : Metrics template

C : Product risk profile

D : List of third-party software

Answer: D

Free Secure-Software-Design Mock Exam – Practice Online Confidently

Buying Options: