Question 1

The software security team has been tasked with assessing a document management application that has been in use for many years and developing a plan to ensure it complies with organizational policies. Which post-release deliverable is being described?

Options :

A : Security strategy tor M&A products

B : Security strategy for legacy code

C : Post-release certifications

D : External vulnerability disclosure response process

Answer: B

Question 2

What is a countermeasure to the web application security frame (ASF) authentication threat category?

Options :

A : Role-based access controls restrict access

B : Credentials and tokens are encrypted.

C : Cookies have expiration timestamps.

D : Sensitive information is scrubbed from error messages

Answer: A

Question 3

What are the three primary goals of the secure software development process?

Options :

A : Performance, reliability, and maintainability

B : Cost, speed to market, and profitability

C : Redundancy, scalability, and portability

D : Confidentiality, integrity, and availability

Answer: D

Question 4

Which security assessment deliverable identities unmanaged code that must be kept up to date throughout the life of the product?

Options :

A : Threat profile

B : Metrics template

C : Product risk profile

D : List of third-party software

Answer: D

Question 5

A new product does not display personally identifiable information, will not let private documents be printed, and requires elevation of privilege to retrieve archive documents. Which secure coding practice is this describing?

Options :

A : Access control

B : Data protection

C : Input validation

D : Authentication

Answer: A

Free Secure-Software-Design Mock Exam – Practice Online Confidently

Buying Options: