CSSLP Domain 5 - Secure Software Testing Complete Solutions

CSSLP Domain 5 - Secure Software Testing Complete Solutions The ability of the software to restore itself to expected functionality when the security protection that is built in is breached is also known as A. redundancy B. recoverability C. resiliency D. reilability ️B. recoverability In which of the following software development methodologies does unit testing enable collective code ownership and is critical to assure software assurance? A. Waterfall B. Agile C. Spiral D. Prototyping ️B. Agile Which of the secure design principles is promoted when test harnesses are used? A. Least privilege B. Separation of duties C. Leveraging existing components D. Psychological acceptability ️D. Psychological acceptability The use of IF-THEN rules is characteristic of which of the following types of software testing? A. Logic B. Scalability C. Integration D. Unit ️A. Logic The implementation of secure features such as complete mediation and data replication needs to undergo which of the following types of test to ensure that the software meets the service level agreements (SLA)? A. Stress B. Unit C. Integration D. Regression ️A. Stress Tests that are conducted to determine the breaking point of the software after which the software will no longer be functional is characteristic of which of the following types of software testing? A. Regression B. Stress C. Integration D. Simulation ️B. Stress Which of the following tools or techniques can be used to facilitate the white box testing of software for insider threats? A. Source code analyzers B. Fuzzers C. Banner grabbing software D. Scanners ️A. Source code analyzers When very limited or no knowledge of the software is made known to the software tester before she