Confidently Practice Online with Free Secure-Software-Design Exam Cram

A company is moving forward with a new product. Product scope has been determined, teams have formed, and backlogs have been created. Developers are actively writing code for the new product, with one team concentrating on delivering data via REST services, one Team working on the mobile apps, and a third team writing the web application. Which phase of the software development lifecycle (SDLC) is being described?

Which threat modeling step collects exploitable weaknesses within the product? 

Which secure coding best practice says to use well-vetted algorithms to ensure that the application uses random identifiers, that identifiers are appropriately restricted to the application, and that user processes are fully terminated on logout?

The software security team is performing security testing for a new software product that is close to production release. They are concentrating on integrations between the new product and database servers, web servers, and web services. Which security testing technique is being used?

Which secure coding best practice says to use a single application-level authorization component that will lock down the application if it cannot access its configuration information?