CISSP SoftwareCISSP So ftware
Development Develo
Security pment
Study Security
Guide Questions & Answers Exam Prep 2026
Study this set o nline at: https://www.cram.co m/flashcards/cissp-so ftware-
develo pment-security-6350060
Key obj ecti ve of appl i cati on securi ty E nsure the conf i denti al i ty, i ntegri ty and avai l abi l i ty of data.
Cri ti cal f or an appl i cati on securi ty program to be ef f ecti ve D evel op the securi ty pol i cy that can be enf orced.
Archi tecture that states "T here i s no i nherent di f f erence between data and
Von Neumann
programmi ng representati ons i n computer memory."
I mportant characteri sti c of bytecode I t i s f aster than i nterpreted l anguages
1
, CISSP SoftwareCISSP So ftware
Development Develo
Security pment
Study Security
Guide Questions & Answers Exam Prep 2026
Study this set o nline at: https://www.cram.co m/flashcards/cissp-so ftware-
develo pment-security-6350060
Al so known as conf i nement probl em i s an i nf ormati on f l ow i ssue. T wo cooperati ng
processes that si mul taneousl y compete f or a shared resource i n such a way that
Covert channel they can vi ol ate the system securi ty pol i cy. Can l ead to deni al of servi ce and
obj ect reuse has to do wi th di scl osure protecti on when obj ects i n memory are we
used by di f f erent processes.
D i rect or i ndi rect readi ng of a storage l ocati on by one process and a di rect or
i ndi rect readi ng of the same storage l ocati on by another process. I nvol ves f i ni te
Covert storage channel
resource, such as memory l ocati on or sector on a di sk that i s shared by two
subj ects at di f f erent securi ty l evel s.
D epends upon bei ng abl e to i nf l uence the rate that some other processes abl e to
Covert ti mi ng channel s
acqui re resources, such as the CPU, memory, or i /o devi ces.
E nabl es attackers to i nj ect cl i ent-si de scri pt i nto web pages vi ewed by other
Cross-si te scri pti ng
users.
2
Development Develo
Security pment
Study Security
Guide Questions & Answers Exam Prep 2026
Study this set o nline at: https://www.cram.co m/flashcards/cissp-so ftware-
develo pment-security-6350060
Key obj ecti ve of appl i cati on securi ty E nsure the conf i denti al i ty, i ntegri ty and avai l abi l i ty of data.
Cri ti cal f or an appl i cati on securi ty program to be ef f ecti ve D evel op the securi ty pol i cy that can be enf orced.
Archi tecture that states "T here i s no i nherent di f f erence between data and
Von Neumann
programmi ng representati ons i n computer memory."
I mportant characteri sti c of bytecode I t i s f aster than i nterpreted l anguages
1
, CISSP SoftwareCISSP So ftware
Development Develo
Security pment
Study Security
Guide Questions & Answers Exam Prep 2026
Study this set o nline at: https://www.cram.co m/flashcards/cissp-so ftware-
develo pment-security-6350060
Al so known as conf i nement probl em i s an i nf ormati on f l ow i ssue. T wo cooperati ng
processes that si mul taneousl y compete f or a shared resource i n such a way that
Covert channel they can vi ol ate the system securi ty pol i cy. Can l ead to deni al of servi ce and
obj ect reuse has to do wi th di scl osure protecti on when obj ects i n memory are we
used by di f f erent processes.
D i rect or i ndi rect readi ng of a storage l ocati on by one process and a di rect or
i ndi rect readi ng of the same storage l ocati on by another process. I nvol ves f i ni te
Covert storage channel
resource, such as memory l ocati on or sector on a di sk that i s shared by two
subj ects at di f f erent securi ty l evel s.
D epends upon bei ng abl e to i nf l uence the rate that some other processes abl e to
Covert ti mi ng channel s
acqui re resources, such as the CPU, memory, or i /o devi ces.
E nabl es attackers to i nj ect cl i ent-si de scri pt i nto web pages vi ewed by other
Cross-si te scri pti ng
users.
2
