Question 1

Company leadership has discovered an untapped revenue stream within its customer base and wants to meet

with IT to share its vision for the future and determine whether to move forward.

Which phase of the software development lifecycle (SDLC) is being described?

Options :

A : Implementation

B : Design

C : Planning

D : Requirements

Answer: C

Question 2

While performing functional testing of the ordering feature in the new product, a tester noticed that the order

object was transmitted to the POST endpoint of the API as a human-readable JSON object.

How should existing security controls be adjusted to prevent this in the future?

Options :

A : Ensure passwords and private information are not logged

B : Ensure sensitive transactions can be traced through an audit log

C : Ensure the contents of authentication cookies are encrypted

D : Ensure all requests and responses are encrypted

Answer: D

Question 3

Which privacy impact statement requirement type defines how personal information will be protected when authorized or independent external entities are involved?

Options :

A : Personal information retention requirements

B : User controls requirements

C : Third party requirements

D : Data integrity requirements

Answer: C

Question 4

The product security incident response team (PSIRT) has decided to make a formal public disclosure,

including base and temporal common vulnerability scoring system (CVSS) scores and a common

vulnerabilities and exposures (CVE) ID report, of an externally discovered vulnerability.

What is the most likely reason for making a public disclosure?

Options :

A : The potential for increased public awareness of a vulnerability is probable, which could lead to higher risk for customers.

B : The vulnerability reporter has threatened to make the finding public after being notified that their case was not credible.

C : The response team has determined that the vulnerability is credible.

D : Notification of a vulnerability from an external party has occurred.

Answer: C

Question 5

A company is moving forward with a new product. Product scope has been determined, teams have formed, and backlogs have been created. Developers are actively writing code for the new product, with one team concentrating on delivering data via REST services, one Team working on the mobile apps, and a third team writing the web application. Which phase of the software development lifecycle (SDLC) is being described?

Options :

A : Deployment

B : Design

C : Implementation

D : Requirements

Answer: C

Confidently Practice Online with Free Secure-Software-Design Exam Cram

Buying Options: