In secure software design and development, what is meant by secure defaults?
Correct Answer: B. configuring software to be safe unless intentionally changed
MCQ Collection
Secure Software Design and Development MCQs
Practice Secure Software Design and Development questions with answers and explanations.
Which statement best describes the purpose of design process?
Correct Answer: B. an organized sequence for translating requirements into architecture and detailed design
For a semester exam, which option is correct about Clark-Wilson model?
Correct Answer: A. an integrity model based on well-formed transactions and separation of duties
In secure software design and development, what is meant by non-functional security requirement?
Correct Answer: D. a required security quality such as availability, resilience or auditability
Which statement best describes the purpose of secure defaults?
Correct Answer: D. configuring software to be safe unless intentionally changed
For a semester exam, which option is correct about design process?
Correct Answer: C. an organized sequence for translating requirements into architecture and detailed design
In secure software design and development, what is meant by Access Triple in Clark-Wilson?
Correct Answer: D. subject, program and object relationships that control authorized transformations
Which statement best describes the purpose of non-functional security requirement?
Correct Answer: A. a required security quality such as availability, resilience or auditability
For a semester exam, which option is correct about secure defaults?
Correct Answer: D. configuring software to be safe unless intentionally changed
In secure software design and development, what is meant by software development methodology?
Correct Answer: A. a structured approach such as agile, waterfall or iterative development
Which statement best describes the purpose of FIPS?
Correct Answer: D. U.S. federal information processing standards for approved security and information processing requirements
For a semester exam, which option is correct about OCTAVE?
Correct Answer: C. a risk-based method focused on operationally critical threats, assets and vulnerabilities