D4873 4 -
3 4 Secure3 4 Software3 4 Design3 4 Knowlege3 4 Check3 4 and3 4 Quiz
1. WhatStudy 34online
34are 34at34https://quizlet.com/_f8cv4s
34the 34two34common34best34principles34of34software34applications34
in34the34development34process?:34Quality34Code34&34Secure34Code
2. What34ensures34that34the34user34has34the34appropriate34role34and34privilege34t
o34view34data?:34Authorization
3. Which34security34goal34is34defined34by34"guarding34against34improper34inform
ation34modification34or34destruction34and34ensuring34information34non-
repudiation34and34authenticity"?:34Integrity
4. Which34phase34in34an34SDLC34helps34to34define34the34problem34and34scope3
4of34any34existing34systems34and34determine34the34objectives34of34new 34syste
ms?:34Planning
5. What34happens34during34a34dynamic34code34review?:34Programmers34monitor34sy
stem34memory,34functional34behavior,34response34times,34and34overall34performance.
6. How34should34you34store34your34application34user34credentials34in34your34applic
ation34database?:34Store34credentials34using34salted34hashes
7. Which34software34methodology34resembles34an34assembly-
line34approach?:34Wa-34terfall34model
8. Which34software34methodology34approach34provides34faster34time34to34market
34and34higher34business34value?:34Agile34model
9. In34Scrum34methodology,34who34is34responsible34for34making34decisions34o
n34the34requirements?:34Product34Owner
10. What34is34the34product34risk34profile?:34A34security34assessment34deliverabl
e34that34estimates34the34actual34cost34of34the34product
11. A34software34security34team34member34has34been34tasked34with34creating34a34
deliv-
34erable34that34provides34details34on34where34and34to34what34degree34sensitive34cu
stomer34information34is34collected,34stored,34or34created34within34a34new34produ
ct34offering.
What34does34the34team34member34need34to34deliver34in34order34to34meet34the34objec
ve?:34-
Privacy34impact34assessment
12. A34software34security34team34member34has34been34tasked34with34creating34a34
threat34model34for34the34login34process34of34a34new34product.What34is34the34first3
4step34the34team34member34should34take?:34Identify34security34objectives
13. What34are34three34parts34of34the34STRIDE34methodology?:34Spoofing,34Elev
ation,34Tampering
14. What34is34the34reason34software34security34teams34host34discovery34meetings
34with34stakeholders34early34in34the34development34life34cycle?:34To34ensure34that34se
curity34is34built34into34the34product34from34the34start
15. Why34should34a34security34team34provide34documented34certification34requir
134/
349
, D4873 4 -
3 4 Secure3 4 Software3 4 Design3 4 Knowlege3 4 Check3 4 and3 4 Quiz
e- Study34online34at34https://quizlet.com/_f8cv4s
34ments34during34the34software34assessment34phase?:34Depending34on34the34enviro
nment34in34which34the34product34resides,34certifications34may34be34required34by34corpor
ate34or34govern-
34ment34entities34before34the34software34can34be34released34to34customers.
234/
349
3 4 Secure3 4 Software3 4 Design3 4 Knowlege3 4 Check3 4 and3 4 Quiz
1. WhatStudy 34online
34are 34at34https://quizlet.com/_f8cv4s
34the 34two34common34best34principles34of34software34applications34
in34the34development34process?:34Quality34Code34&34Secure34Code
2. What34ensures34that34the34user34has34the34appropriate34role34and34privilege34t
o34view34data?:34Authorization
3. Which34security34goal34is34defined34by34"guarding34against34improper34inform
ation34modification34or34destruction34and34ensuring34information34non-
repudiation34and34authenticity"?:34Integrity
4. Which34phase34in34an34SDLC34helps34to34define34the34problem34and34scope3
4of34any34existing34systems34and34determine34the34objectives34of34new 34syste
ms?:34Planning
5. What34happens34during34a34dynamic34code34review?:34Programmers34monitor34sy
stem34memory,34functional34behavior,34response34times,34and34overall34performance.
6. How34should34you34store34your34application34user34credentials34in34your34applic
ation34database?:34Store34credentials34using34salted34hashes
7. Which34software34methodology34resembles34an34assembly-
line34approach?:34Wa-34terfall34model
8. Which34software34methodology34approach34provides34faster34time34to34market
34and34higher34business34value?:34Agile34model
9. In34Scrum34methodology,34who34is34responsible34for34making34decisions34o
n34the34requirements?:34Product34Owner
10. What34is34the34product34risk34profile?:34A34security34assessment34deliverabl
e34that34estimates34the34actual34cost34of34the34product
11. A34software34security34team34member34has34been34tasked34with34creating34a34
deliv-
34erable34that34provides34details34on34where34and34to34what34degree34sensitive34cu
stomer34information34is34collected,34stored,34or34created34within34a34new34produ
ct34offering.
What34does34the34team34member34need34to34deliver34in34order34to34meet34the34objec
ve?:34-
Privacy34impact34assessment
12. A34software34security34team34member34has34been34tasked34with34creating34a34
threat34model34for34the34login34process34of34a34new34product.What34is34the34first3
4step34the34team34member34should34take?:34Identify34security34objectives
13. What34are34three34parts34of34the34STRIDE34methodology?:34Spoofing,34Elev
ation,34Tampering
14. What34is34the34reason34software34security34teams34host34discovery34meetings
34with34stakeholders34early34in34the34development34life34cycle?:34To34ensure34that34se
curity34is34built34into34the34product34from34the34start
15. Why34should34a34security34team34provide34documented34certification34requir
134/
349
, D4873 4 -
3 4 Secure3 4 Software3 4 Design3 4 Knowlege3 4 Check3 4 and3 4 Quiz
e- Study34online34at34https://quizlet.com/_f8cv4s
34ments34during34the34software34assessment34phase?:34Depending34on34the34enviro
nment34in34which34the34product34resides,34certifications34may34be34required34by34corpor
ate34or34govern-
34ment34entities34before34the34software34can34be34released34to34customers.
234/
349
