Operating System Security Exam Questions and Correct Solutions Graded A+ (Already Passed)

Operating System Security Exam Questions and Correct Solutions Graded A+ (Already Passed) In agile software development, each sprint ends at a specific point in time and should have some deliverable. - Answers True Configuration control is a set of processes and approval stages required to change a configuration item's attributes and to re-baseline them. - Answers True The Software Security Framework (SSF) is a component of the Building Security in Maturity Model (BSIMM) that organizes the 109 BSIMM activities into a framework consisting of 12 practices in four domains. - Answers True The Security Development Lifecycle (SDL) is a security assurance process that is focused on software development. - Answers True A deliverable is a description of components stored in a database. - Answers False A Configuration Control Board (CCB) is a person or group of people responsible for making decisions about changes to the system definition during the course of the development life cycle. - Answers True Configuration identification is the ability to record and report on the configuration baselines associated with each configuration item at any moment in time. - Answers False A schema is any object created as a result of project activities. - Answers False Configuration auditing is the process of confirming that all system components that should be in a given baseline are present. - Answers True The System Process Framework (SPF) is a formal model for the process of creating and modifying software. - Answers False Decomposition refers to breaking down a software development project into distinct phases. - Answers True The development method an organization uses is more important than attention to security. - Answers False Software development is as much an art as it is a science. - Answers True The most important concept in the Software Development Life Cycle (SDLC) is decomposition, or breaking down a software development project into distinct phases. - Answers True Agile development is a method of developing software that is based on small project iterations, or sprints, instead of long project schedules. - Answers True One of the main reasons the Building Security in Maturity Model (BSIMM) model is so valuable is that it reports on what works in the area of secure application development. - Answers True Testing and evaluating application changes after implementation is unnecessary. - Answers False The Software Security Framework (SSF) is a collection of best practices for handling changes in software projects. - Answers False A deliverable is a small project iteration used in agile software development. - Answers False A Software Security Framework (SSF) is a newly published framework for software development that is the result of a study of large organizations that develop software with a specific focus on security. - Answers False Which of the following is NOT one of the most common application vulnerabilities? - Answers Agile development Which of the following refers to a newly published framework for software development that is the result of a study of large organizations that develop software with a specific focus on security? - Answers Building Security in Maturity Model (BSIMM) Which of the following is NOT one of the common needs for control throughout the development process, regardless of the specific software development method used? - Answers Unique process that cannot be repeated Which of the following is NOT one of the four domains of Software Security Framework (SSF)? - Answers Decomposition Which of the following refers to a security assurance process that is focused on software development? - Answers Security Development Lifecycle (SDL) Which of the following is a component of the Building Security in Maturity Model (BSIMM) that organizes the 109 BSIMM activities into a framework consisting of 12 practices in four domains? - Answers Software Security Framework (SSF) The System Development Life Cycle (SDLC) is a: - Answers formal model for the process of creating and modifying software. Which of the following is NOT part of software configuration management (SCM)? - Answers Life cycle management Which of the following is NOT one of the four software configuration management (SCM) activities? - Answers Configuration phase-in