Multiple Choice Questions - Choose One Unless Instructed Otherwise - PLEASE INCLUDE RATIONALE BEHIND ANSWER AND REFERENCE

• 1. Having a software assurance plan ensures which of the following?
  • a. secure code
  • b. that a process is in place within the development life cycle that tests for security vulnerabilities
  • c. that the software is safe from attacks
  • d. that  the development has tested for security vulnerabilities before releasing the software  product
  • ANSWER:

 

• 2. To address failing securely, what should be built into the code (CHOOSE ALL THAT APPLY)?
  • a. Proper error handling
  • b. Self-detection of a failure
  • c. Separation of GUI requirements from database requirements
  • d. Separation  of GUI requirements from business requirements
  • ANSWERS:

 

• 3. Into which of the eight design principles by Saltzer and Schroeder does the following design fit?
  • a. Fail-safe
  • b. Complete mediation
  • c. Keep it simple
  • d. Least  privilege

ANSWER:

 

4.  Into which of the eight design principles by Saltzer and Schroeder does the following design fit?

• a. Fail-safe
• b. Complete mediation
• c. Least privilege
• d. Keep  it simple

ANSWER:

 

• 5. Which tool will help most in the following situation?
  • a. IDE
  • b. Version Control
  • c. Build Tool
  • d. Merge  Tool
  • ANSWER:
  • 6. True or False: Fuzzers are used in Reliability Testing
  • ANSWER: