CSCI 3300 Quiz 1-4 Questions with
Accurate Answers
A use-case identifies a typical interaction with a system and the actors
(human or computer) involved in that interaction. (True/False) correct
answer True
All stages of preliminary security risk assessment? correct answer Asset
identification
- Identify the key system assets (or services) that have to be protected.
Asset value assessment
- Estimate the value of the identified assets.
Exposure assessment
- Assess the potential losses associated with each asset.
Threat identification
- Identify the most probable threats to the system assets
Attack assessment
- Decompose threats into possible attacks on the system and the ways
that these may occur.
,Control identification
- Propose the controls that may be put in place to protect an asset.
Feasibility assessment
- Assess the technical feasibility and cost of the controls.
Security requirements definition
- Define system security requirements. These can be
infrastructure or application system requirements.
Below are some headings of the eight principles in ACM/IEEE Code of
Ethics:
- Quality
- Profession
- Client and Employer
- Developer
- Product correct answer - Profession
- Client and Employer
- Product
Following are nonfunctional requirements. (select all that apply)
- Ease of use
, - Usability
- Portability
- Speed correct answer - Ease of use
- Usability
- Portability
- Speed
Following are principal stages of testing for a commercial software
system. (Choose all that apply)
- Development testing
- User testing
- Release testing
- Pre-requirement testing correct answer - Development testing
- User testing
- Release testing
Following are requirements validation techniques. (Select all that apply)
- Configuration management
- Prototyping
- Requirements reviews
- Test-case generation correct answer - Prototyping
- Requirements reviews
Accurate Answers
A use-case identifies a typical interaction with a system and the actors
(human or computer) involved in that interaction. (True/False) correct
answer True
All stages of preliminary security risk assessment? correct answer Asset
identification
- Identify the key system assets (or services) that have to be protected.
Asset value assessment
- Estimate the value of the identified assets.
Exposure assessment
- Assess the potential losses associated with each asset.
Threat identification
- Identify the most probable threats to the system assets
Attack assessment
- Decompose threats into possible attacks on the system and the ways
that these may occur.
,Control identification
- Propose the controls that may be put in place to protect an asset.
Feasibility assessment
- Assess the technical feasibility and cost of the controls.
Security requirements definition
- Define system security requirements. These can be
infrastructure or application system requirements.
Below are some headings of the eight principles in ACM/IEEE Code of
Ethics:
- Quality
- Profession
- Client and Employer
- Developer
- Product correct answer - Profession
- Client and Employer
- Product
Following are nonfunctional requirements. (select all that apply)
- Ease of use
, - Usability
- Portability
- Speed correct answer - Ease of use
- Usability
- Portability
- Speed
Following are principal stages of testing for a commercial software
system. (Choose all that apply)
- Development testing
- User testing
- Release testing
- Pre-requirement testing correct answer - Development testing
- User testing
- Release testing
Following are requirements validation techniques. (Select all that apply)
- Configuration management
- Prototyping
- Requirements reviews
- Test-case generation correct answer - Prototyping
- Requirements reviews
