D487 - SECURE SOFTWARE DESIGN Questions with Correct Solutions
Question:
1. SDLC Phase 1
Answer:
planning - a vision and next steps are created
Question:
2. SDLC Phase 2
Answer:
requirements - necessary software requirements are determined
Question:
3. SDLC Phase 3
Answer:
design - requirements are prepared for the technical design
Question:
4. SDLC Phase 4
Answer:
implementation - the resources involved in the application from a known resource are
determined
Question:
5. SDLC Phase 5
Answer:
testing - software is tested to verify its functions through a known environment
Question:
6. SDLC Phase 6
Answer:
deployment - security is pushed out
Question:
7. SDLC Phase 7
Answer:
maintenance - ongoing security monitoring is implemented
, Question:
8. SDLC Phase 8
Answer:
end of life - the proper steps for removing software completely are considered
Question:
9. BSIMM
Answer:
a study of real-world software security that allows you to develop your software security over
time
Question:
10. OWASP SAMM
Answer:
flexible framework for building security into a software development organization
Question:
11. Static Analysis
Answer:
the analysis of computer software that is performed without executing programs
Question:
12. Dynamic Analysis
Answer:
the analysis of computer software that is performed when executing programs on a real or
virtual processor in real time
Question:
13. Fuzz Testing
Answer:
automated or semi-automated testing that provides invalid, unexpected, or random data to
the computer software program
Question:
14. Waterfall Development
Answer:
software development methodology that breaks down development activities into linear
sequential phases; each phase depends on the deliverables of the previous one and
corresponds to a specialization of tasks
Question:
1. SDLC Phase 1
Answer:
planning - a vision and next steps are created
Question:
2. SDLC Phase 2
Answer:
requirements - necessary software requirements are determined
Question:
3. SDLC Phase 3
Answer:
design - requirements are prepared for the technical design
Question:
4. SDLC Phase 4
Answer:
implementation - the resources involved in the application from a known resource are
determined
Question:
5. SDLC Phase 5
Answer:
testing - software is tested to verify its functions through a known environment
Question:
6. SDLC Phase 6
Answer:
deployment - security is pushed out
Question:
7. SDLC Phase 7
Answer:
maintenance - ongoing security monitoring is implemented
, Question:
8. SDLC Phase 8
Answer:
end of life - the proper steps for removing software completely are considered
Question:
9. BSIMM
Answer:
a study of real-world software security that allows you to develop your software security over
time
Question:
10. OWASP SAMM
Answer:
flexible framework for building security into a software development organization
Question:
11. Static Analysis
Answer:
the analysis of computer software that is performed without executing programs
Question:
12. Dynamic Analysis
Answer:
the analysis of computer software that is performed when executing programs on a real or
virtual processor in real time
Question:
13. Fuzz Testing
Answer:
automated or semi-automated testing that provides invalid, unexpected, or random data to
the computer software program
Question:
14. Waterfall Development
Answer:
software development methodology that breaks down development activities into linear
sequential phases; each phase depends on the deliverables of the previous one and
corresponds to a specialization of tasks
