Free Secure-Software-Design Mock Exam – Practice Online Confidently

The security team has received notice of an insecure direct object reference vulnerability in a third-party component library that could result in remote code execution. The component library was replaced and is no longer being used within the application. How should the organization remediate this vulnerability?

Which software-testing technique can be automated or semi-automated and provides invalid, unexpected, or random data to the inputs of a computer software program?

The product development team is preparing for the production deployment of recent feature enhancements. One morning, they noticed the amount of test data grew exponentially overnight. Most fields were filled with random characters, but some structured query language was discovered. Which type of security development lifecycle (SDL) tool was likely being used? 

The software security team has been tasked with assessing a document management application that has been in use for many years and developing a plan to ensure it complies with organizational policies. Which post-release deliverable is being described?

Company leadership has discovered an untapped revenue stream within its customer base and wants to meetwith IT to share its vision for the future and determine whether to move forward.Which phase of the software development lifecycle (SDLC) is being described?