What is a study of real-world software security initiatives arranged such that
businesses may monitor their progress and learn how to improve them over time?, -
Answer: Building Security In Maturity Model (BSIMM).
What is the process of analyzing computer software without executing programs? -
ANSWER Static Analysis
Which International Organization for Standardization (ISO) standard is the current
benchmark for information security? ANSWER ISO/IEC 27001.
What is real-time analysis of computer software?- ANSWER: Dynamic analysis
Which individual is in charge of developing, planning, and implementing secure
coding techniques and security testing methodologies? - Answer: Software security
architect
A corporation is ready to include a new feature in its flagship software product. The
new feature is comparable to those added in past years, and the specifications are
well-documented. The project is planned to last three to four months, after which
the new feature will be available to customers. Project team members will
concentrate completely on the new feature until the project is completed. What
software development technique is being used? - ANSWER Waterfall
A new product will need an administration component for a modest number of
users. Normal users will have access to limited client information and should not
see any admin capability within the application. What notion is being used? -
ANSWER Principle of least privilege.
, The scrum team is attending their morning meeting, which is set for the start of the
workday. Each team member informs on what they completed yesterday, what they
want to do today, and whether they have any obstructions that could cause them to
miss the delivery date. Which scrum ceremony does the team participate in? -
ANSWER Daily Scrum
What is a list of information security vulnerabilities intended to provide names for
publicly known issues? - Answer: Common computer vulnerabilities and exposures
(CVE).
Which secure coding best practices use well-tested, publicly available techniques to
protect product data from unauthorized access? - ANSWER Cryptographic
Practices
Which secure coding best practices use well-tested, publicly available techniques to
protect product data from unauthorized access? - ANSWER Cryptographic
Practices
Which secure coding best practice assures that all servers, frameworks, and system
components are using the most recent approved versions? - ANSWER: System
configuration.
Which safe coding best practice recommends parameterized queries, encrypted
connection strings stored in separate configuration files, strong passwords, and
multi-factor authentication? - ANSWER Database Security
Which secure coding best practice requires that all information sent to external
systems be encrypted? - ANSWER Communication Security
team members are introduced during sprint zero of the project kickoff meeting. The
individual being presented is a scrum team member who writes feature logic and
attends sprint ceremonies. Which role does the team member play? - ANSWER
Software Developer
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through EFT, credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying this summary from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller luzlinkuz. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy this summary for R206,29. You're not tied to anything after your purchase.
