For a semester exam, which option is correct about attack surface reduction?
Correct Answer: A. minimizing exposed entry points, services and interfaces attackers can abuse
MCQ Collection
Secure Software Design and Development MCQs
Practice Secure Software Design and Development questions with answers and explanations.
In secure software design and development, what is meant by separation of duties?
Correct Answer: D. dividing responsibilities so no single actor can complete a sensitive process alone
For a semester exam, which option is correct about secure software requirements?
Correct Answer: C. security needs and constraints that the software must satisfy
In secure software design and development, what is meant by least privilege?
Correct Answer: B. giving users and processes only the permissions needed to perform their tasks
Which statement best describes the purpose of separation of duties?
Correct Answer: C. dividing responsibilities so no single actor can complete a sensitive process alone
In secure software design and development, what is meant by sources of security requirements?
Correct Answer: C. laws, standards, threat models, business needs and stakeholder expectations
Which statement best describes the purpose of least privilege?
Correct Answer: A. giving users and processes only the permissions needed to perform their tasks
For a semester exam, which option is correct about separation of duties?
Correct Answer: D. dividing responsibilities so no single actor can complete a sensitive process alone
Which statement best describes the purpose of sources of security requirements?
Correct Answer: C. laws, standards, threat models, business needs and stakeholder expectations
For a semester exam, which option is correct about least privilege?
Correct Answer: C. giving users and processes only the permissions needed to perform their tasks
In secure software design and development, what is meant by secure design review?
Correct Answer: C. examining architecture to identify security weaknesses before implementation
For a semester exam, which option is correct about sources of security requirements?
Correct Answer: B. laws, standards, threat models, business needs and stakeholder expectations