Which statement best describes the purpose of privacy regulation?
Correct Answer: D. legal and policy requirements controlling collection, processing and protection of personal data
MCQ Collection
Secure Software Design and Development MCQs
Practice Secure Software Design and Development questions with answers and explanations.
For a semester exam, which option is correct about security in the SDLC?
Correct Answer: A. integrating security requirements, design, coding, testing and maintenance throughout development
In secure software design and development, what is meant by OWASP code review guide?
Correct Answer: A. guidance for reviewing source code to find security weaknesses
Which statement best describes the purpose of DREAD?
Correct Answer: C. a risk rating method considering damage, reproducibility, exploitability, affected users and discoverability
For a semester exam, which option is correct about privacy regulation?
Correct Answer: B. legal and policy requirements controlling collection, processing and protection of personal data
In secure software design and development, what is meant by risk management?
Correct Answer: C. identifying, analyzing, prioritizing and treating security risks
Which statement best describes the purpose of OWASP code review guide?
Correct Answer: A. guidance for reviewing source code to find security weaknesses
For a semester exam, which option is correct about DREAD?
Correct Answer: D. a risk rating method considering damage, reproducibility, exploitability, affected users and discoverability
In secure software design and development, what is meant by compliance?
Correct Answer: B. meeting required laws, regulations, standards and organizational policies
Which statement best describes the purpose of risk management?
Correct Answer: C. identifying, analyzing, prioritizing and treating security risks
For a semester exam, which option is correct about OWASP code review guide?
Correct Answer: B. guidance for reviewing source code to find security weaknesses
In secure software design and development, what is meant by OSSTMM?
Correct Answer: C. a methodology manual for structured open source security testing