Exam with Questions and Verified Rationalized Answers
100% Guaranteed Graded A+ Pass
1. SDLC Phase 1: planning - a vision and next steps are created
2. SDLC Phase 2: requirements - necessary software requirements are determined
3. SDLC Phase 3: design - requirements are prepared for the technical design
4. SDLC Phase 4: implementation - the resources involved in the application froma
known resource are determined
5. SDLC Phase 5: testing - software is tested to verify its functions through a known
environment
6. SDLC Phase 6: deployment - security is pushed out
7. SDLC Phase 7: maintenance - ongoing security monitoring is implemented
8. SDLC Phase 8: end of life - the proper steps for removing software completelyare
considered
9. BSIMM: a study of real-world software security that allows you to develop your
software security over time
10. OWASP SAMM: flexible framework for building security into a software develop-
1/4
, ment organization
11. Static Analysis: the analysis of computer software that is performed without
executing programs
12. Dynamic Analysis: the analysis of computer software that is performed when
executing programs on a real or virtual processor in real time
13. Fuzz Testing: automated or semi-automated testing that provides invalid, unex-
pected, or random data to the computer software program
14. Waterfall Development: software development methodology that breaks down
development activities into linear sequential phases; each phase depends on the
deliverables of the previous one and corresponds to a specialization of tasks
15. Waterfall Phases (typical): plan -> build -> test -> review -> deploy
16. Iterative Waterfall Development: each phase of a project is broken down intoits
own waterfall phases
17. Agile Development: software development methodology that delivers function-
ality in rapid iterations called timeboxes, requiring limited planning but frequent
communication
18. Scrum: framework for Agile that prescribes for teams to break work into goalsto
be completed within sprints
2/4