WGU C706 - Simplified Cram Set: Questions With
Appropriate Solutions
AGILE Accurate Answer:- 1. Short releases
2. Delayed design
3. Involve users along the way
4. Minimal documentation
5. Informal/frequent documentation
6. Constant change
describe AGILE in a picture Accurate Answer:- short, informal mini-
docs forever changing users
Why go AGILE? Accurate Answer:- efficient short cycles dedupe
adaptability
Who are the 5 AGILE's? Accurate Answer:- XP
Crystal
UP
Scrum
Open
XP is Accurate Answer:- Extreme Programming
UP is Accurate Answer:- Unified Process
RUP is Accurate Answer:- Rational Unified Process
'Open' is Accurate Answer:- Open Source
a picture of XP Accurate Answer:- Lotsa comm keeps small iterations
simple & continuously testing courage
Crystal Creator Accurate Answer:- Cockburn
XP Creator Accurate Answer:- K Beck
,picture of Crystal Accurate Answer:- size of devs, critical of $, prioritize
time
The 3 Crystals Accurate Answer:- Crystal clear, orange, and orange web
Crystal Clear Accurate Answer:- 1. Non-critical
2. Discretionary $
3. 6-8 devs
4. Max 2 months
Which crystal is larger? Accurate Answer:- Crystal Orange
What is a crystal sized? Accurate Answer:- by # of devs
Which is the critical Crystal? Accurate Answer:- Orange
What is the fattest Agile? Accurate Answer:- RUP
How did RUP get fat? Accurate Answer:- It most iteratively required all
up front
Scrum Creator Accurate Answer:- TakeuchiNonaka
Scrum in a picture Accurate Answer:- 'rolls' rules artifact events
Scrum exercise Accurate Answer:- sprints
Scrum 'Rolls' Accurate Answer:- Owner Dev Master
Scrum Events Accurate Answer:- Plan to Sprint by the daily scrum to
review prodlogs restrospectively
Scrum Artifacts Accurate Answer:- Things found in a Scrum
4 scrumbly artifacts Accurate Answer:- prodlog and sprintlog to
increment the burn
SOAR is Accurate Answer:- State of the Art Report
,SOAR means Accurate Answer:- snapshot of SA discipline
CNSS - Software Assurance Accurate Answer:- Level of confidence that
software is free from vulnerabilities and functions in intended manner
DoD - Software Assurance Accurate Answer:- The level of confidence
that software functions as intended and is free of vulnerabilities, either
intentionally or unintentionally designed or inserted as part of the software
NASA - Software Assurance Accurate Answer:- The planned and
systematic set of activities that ensure that software processes and products
conform to requirements, standards, and procedures.
MITRE's Plover Accurate Answer:- Preliminary List of Vulnerabilities
Examples for Researchers
AVDL Accurate Answer:- Application Vulnerability Description
Language
OVAL Accurate Answer:- Works with CVE using XML and SQL.
Language that tool can use to query CVE to look for vulnerabilities
Threat Categories Accurate Answer:- 1. Sabotage
2. Subversion
3. Interception
4. Disclosure
Threat Tree Accurate Answer:- Top Down model for identifying
vulnerabilities. Top attacker goal at top of tree then work down to smaller
goals to analyze attack structure.
FMEA Accurate Answer:- Failure Modes Effects Analysis is a bottom up
approach for analyzing possible security failures.
BCWS Accurate Answer:- Budget Cost of Work Scheduled
BCWP Accurate Answer:- Budget Cost of Work Performed
ACWP Accurate Answer:- Actual Cost of Work Perfomed
, SV Accurate Answer:- Schedule Variance
CV Accurate Answer:- Cost Variance
SV Formula Accurate Answer:- BCWP-BCWS
CV Formula Accurate Answer:- BCWP-ACWP
Waterall Accurate Answer:- 1. sequential - non-iterative
2. All requirements in 1st step
3. Document driven (lots of docs)
4. Specific identifiable stages
5. entry level developers with limited exposure
Waterfall Phases Accurate Answer:- 1. Conception
2. Initiation
3. Analysis
4. Design
5. Construction
6. Testing
7. Production/Implementation
8. Maintenance
Waterfall Methodology Security Concerns Accurate Answer:- 1.
Requirement Analysis: Define security concerns
2. Design: Misuse cases and vulnerability mapping
3. Construction and Implementation: Secure coding practice
4. Testing: Penetration Assessment
5. Installation: Final security review
6. Operation or Maintenance: Periodic security review and updates
Non-repudiation Accurate Answer:- Sender cannot deny having sent
the message
Software Assurance Accurate Answer:- Ensure processes, procedures,
and products used to produce and sustain software conform to all
requirements and standards.
Appropriate Solutions
AGILE Accurate Answer:- 1. Short releases
2. Delayed design
3. Involve users along the way
4. Minimal documentation
5. Informal/frequent documentation
6. Constant change
describe AGILE in a picture Accurate Answer:- short, informal mini-
docs forever changing users
Why go AGILE? Accurate Answer:- efficient short cycles dedupe
adaptability
Who are the 5 AGILE's? Accurate Answer:- XP
Crystal
UP
Scrum
Open
XP is Accurate Answer:- Extreme Programming
UP is Accurate Answer:- Unified Process
RUP is Accurate Answer:- Rational Unified Process
'Open' is Accurate Answer:- Open Source
a picture of XP Accurate Answer:- Lotsa comm keeps small iterations
simple & continuously testing courage
Crystal Creator Accurate Answer:- Cockburn
XP Creator Accurate Answer:- K Beck
,picture of Crystal Accurate Answer:- size of devs, critical of $, prioritize
time
The 3 Crystals Accurate Answer:- Crystal clear, orange, and orange web
Crystal Clear Accurate Answer:- 1. Non-critical
2. Discretionary $
3. 6-8 devs
4. Max 2 months
Which crystal is larger? Accurate Answer:- Crystal Orange
What is a crystal sized? Accurate Answer:- by # of devs
Which is the critical Crystal? Accurate Answer:- Orange
What is the fattest Agile? Accurate Answer:- RUP
How did RUP get fat? Accurate Answer:- It most iteratively required all
up front
Scrum Creator Accurate Answer:- TakeuchiNonaka
Scrum in a picture Accurate Answer:- 'rolls' rules artifact events
Scrum exercise Accurate Answer:- sprints
Scrum 'Rolls' Accurate Answer:- Owner Dev Master
Scrum Events Accurate Answer:- Plan to Sprint by the daily scrum to
review prodlogs restrospectively
Scrum Artifacts Accurate Answer:- Things found in a Scrum
4 scrumbly artifacts Accurate Answer:- prodlog and sprintlog to
increment the burn
SOAR is Accurate Answer:- State of the Art Report
,SOAR means Accurate Answer:- snapshot of SA discipline
CNSS - Software Assurance Accurate Answer:- Level of confidence that
software is free from vulnerabilities and functions in intended manner
DoD - Software Assurance Accurate Answer:- The level of confidence
that software functions as intended and is free of vulnerabilities, either
intentionally or unintentionally designed or inserted as part of the software
NASA - Software Assurance Accurate Answer:- The planned and
systematic set of activities that ensure that software processes and products
conform to requirements, standards, and procedures.
MITRE's Plover Accurate Answer:- Preliminary List of Vulnerabilities
Examples for Researchers
AVDL Accurate Answer:- Application Vulnerability Description
Language
OVAL Accurate Answer:- Works with CVE using XML and SQL.
Language that tool can use to query CVE to look for vulnerabilities
Threat Categories Accurate Answer:- 1. Sabotage
2. Subversion
3. Interception
4. Disclosure
Threat Tree Accurate Answer:- Top Down model for identifying
vulnerabilities. Top attacker goal at top of tree then work down to smaller
goals to analyze attack structure.
FMEA Accurate Answer:- Failure Modes Effects Analysis is a bottom up
approach for analyzing possible security failures.
BCWS Accurate Answer:- Budget Cost of Work Scheduled
BCWP Accurate Answer:- Budget Cost of Work Performed
ACWP Accurate Answer:- Actual Cost of Work Perfomed
, SV Accurate Answer:- Schedule Variance
CV Accurate Answer:- Cost Variance
SV Formula Accurate Answer:- BCWP-BCWS
CV Formula Accurate Answer:- BCWP-ACWP
Waterall Accurate Answer:- 1. sequential - non-iterative
2. All requirements in 1st step
3. Document driven (lots of docs)
4. Specific identifiable stages
5. entry level developers with limited exposure
Waterfall Phases Accurate Answer:- 1. Conception
2. Initiation
3. Analysis
4. Design
5. Construction
6. Testing
7. Production/Implementation
8. Maintenance
Waterfall Methodology Security Concerns Accurate Answer:- 1.
Requirement Analysis: Define security concerns
2. Design: Misuse cases and vulnerability mapping
3. Construction and Implementation: Secure coding practice
4. Testing: Penetration Assessment
5. Installation: Final security review
6. Operation or Maintenance: Periodic security review and updates
Non-repudiation Accurate Answer:- Sender cannot deny having sent
the message
Software Assurance Accurate Answer:- Ensure processes, procedures,
and products used to produce and sustain software conform to all
requirements and standards.
