D487 Questions with Detailed Verified Answers

Page | 1



D487 Questions with Detailed Verified
Answers

Question:abstract syntax tree (AST)

Ans: the basis for software metrics and issues to be generated at a later stage

Question: active scanner

Ans: modifies the hypertext transfer protocol secure (HTTPS) inputs and
analyzes the response to identify vulnerabilities

Question: Application Security

Ans: the process of finding, fixing, and preventing security vulnerabilities at
the application level

Question: benchmarks

Ans: tests used to compare estimates to actual results

Question: code review

Ans: a process done to identify security vulnerabilities during software
development

Question: control flow analysis

Ans: the mechanism used to step through logical conditions in the code

Question: data flow analysis

Ans: the mechanism used to trace data from the points of input to the points
of output

Question: Design and Development (A4) phase