Question 1

Which secure coding best practice says to use a single application-level authorization component that will lock down the application if it cannot access its configuration information?

Options :

A : Access control

B : Data protection

C : Session management

D : Communication security

Answer: A

Question 2

What is a countermeasure to the web application security frame (ASF) authentication threat category?

Options :

A : Role-based access controls restrict access

B : Credentials and tokens are encrypted.

C : Cookies have expiration timestamps.

D : Sensitive information is scrubbed from error messages

Answer: A

Question 3

The security team has received notice of an insecure direct object reference vulnerability in a third-party component library that could result in remote code execution. The component library was replaced and is no longer being used within the application. How should the organization remediate this vulnerability?

Options :

A : Ensure Sensitive Information Is Not Logged

B : Ensure Auditing and Logging Is Enabled on All Servers

C : Access to Configuration Files Is Limited to Administrators

D : Enforce the Removal of Unused Dependencies

Answer: D

Question 4

The security team is reviewing all noncommercial software libraries used in the new product to ensure they are being used according to the legal specifications defined by the authors. What activity of the Ship SDL phase is being performed?

Options :

A : Policy compliance analysis

B : Open-source licensing review

C : Penetration testing

D : Final security review

Answer: B

Question 5

What are the three primary goals of the secure software development process?

Options :

A : Performance, reliability, and maintainability

B : Cost, speed to market, and profitability

C : Redundancy, scalability, and portability

D : Confidentiality, integrity, and availability

Answer: D

Free Secure-Software-Design Mock Exam – Practice Online Confidently

Buying Options: