CISSP Question and answers 100% correct 2024

CISSP Question and answers 100% correct 2024 Quality - correct answer Fitness for purpose Software controls - correct answer used to control input, encryption, logic processing, number-crunching, interprocess communication, access, output, interfacing w/ other SW... Where Place Security? SW or Perimeter? - correct answer Flaws w/ in SW cause majority of vulns. but perimeter security more often considered than SW insecurities b/c: - in past not considered crucial to implement security during SW dev - most sec professionals not SW devs and no insight into SW vulns - SW devs not sec professionals so no security as main focus - SW vendors trying to get products to market ASAP - industry used to getting SW w/ flaws and applying patches - customers cannot control flaws in SW they purchase so must depend upon perimeter protection Software Security now - correct answer Only recently, corporate customers starting demand security but difficult b/c: - programmers traditionally not educated in secure coding. - OSs and apps not built on secure architectures - SW dev procedures not security oriented This makes integrating security as afterthought clumsier and costlier.