WGU C706 -WESTERN GOVERNORS UNIVERSITY SECURE SOFTWARE DESIGHN 2024 UPDATED EXAM PREPARATION

Which due diligence activity for supply chain security should occur in the initiation phase of the software acquisition life cycle? A Developing a request for proposal (RFP) that includes supply chain security risk management B Lessening the risk of disseminating information during disposal C F...

Which due diligence activity for supply chain security should occur in the initiation phase of the software acquisition life cycle? - correct answer Developing a request for proposal (RFP) that includes supply chain security risk management Which due diligence activity for supply chain security i...

CIA Triad Confidentiality, Integrity, Availability Confidentiality Confidentiality is the concept of the measures used to ensure the protection of the secrecy of data, objects, or resources. Concepts, conditions, and aspects of confidentiality include the following: Sensitivity Discretion Cr...

access control - correct answer The restriction of persons or programs that may access specific information. There are two default policies for this: allow by exception or deny by exception. Access Control List (ACL) - correct answer The list of persons or programs that are allowed (or, in the ca...

Which statement is true of a software development life cycle? A Workload testing should be performed while designing the functional requirements. B Parallel testing verifies whether more than one system is available for redundancy. C A software programmer should be the only person to develop...

Open Design Security Principle - correct answer security of a mechanism should not depend on the secrecy of its design or implementation Strategic attacks - correct answer user general targeting against a broad industry. highly repeatable and Tactical attacks - correct answer surgical by natur...

Which due diligence activity for supply chain security should occur in the initiation phase of the software acqWhich due diligence activity for supply chain security should occur in the initiation phase of the software acquisition life cycle? -Facilitating knowledge transfer between suppliers -Les...

ISO/IEC 27034-1:2011 - correct answer A standard for application security which offers a concise, internationally recognized way to get transparency into a vendor/supplier's software security management process ISO/IEC 27034 standard provides guidance to help organizations embed security within ...

Confidentiality - correct answer In information security, confidentiality "is the property, that information is not made available or disclosed to unauthorized individuals, entities, or processes" Integrity - correct answer In information security, data integrity means maintaining and assuring...

What is the Secure Development Lifecycle? Secure Development Lifecycle. The SDL is the sum of tools, people, models, methodologies, blueprints, metrics that help make systems/software secure. It is focused on baking security into the software/system. What is the TCSDL The trustworthy Computing Se...

Complete Mediation - correct answer Every request by a subject to access an object in a computer system must undergo a valid and effective authorization procedure Entails: (a) identification of the entity making the access request; (b) verification that the request has not changed since its initiat...

Which one of the following types of attacks relies on the difference between the timing of two events? - correct answer TOCTOU What technique may be used to limit the effectiveness of rainbow table attacks? - correct answer Salting What character should always be treated carefully when encount...

principle of Agile development? Foreign key - correct answer Which one of the following key types is used to enforce referential integrity between database tables? Gantt - correct answer What type of chart provides a graphical illustration of a schedule that helps to plan, coordinate, and trac...

Building Security in Maturity Model is a software security maturity model. BSIMMs cigital and OWASP helps determine where your software security stands at the present time and how to mature it over time. Generates 109 BSIMM activities into 12 practices organized into 4 domains. Which ISO/IEC # stan...