Which concept is demonstrated when every module in a particular abstraction layer of a computing environment can only access the information and resources that are necessary for its legitimate purpose?

• A.Elevation of Privilege
• B.Principle of Least Privilege
• C.Privacy
• D.Confidentiality

Comment: *

Name: *

Email: *

Verification: *

Which security assessment deliverable identities possible security vulnerabilities in the product?

• A.SDL project outline
• B.Metrics template
• C.Threat profile
• D.List of third-party software

Comment: *

Name: *

Email: *

Verification: *

What is a countermeasure to the web application security frame (ASF) data validation/parameter validation threat category?

• A.Sensitive information is not logged.
• B.All administrative activities are logged and audited.
• C.Inputs enforce type, format, length, and range checks.
• D.All exceptions are handled in a structured way.

Comment: *

Name: *

Email: *

Verification: *

Which software control test examines the internal logical structures of a program and steps through the code line by line to analyze the program for potential errors?

• A.White box testing
• B.Reasonableness testing
• C.Black box testing
• D.Dynamic testing

Comment: *

Name: *

Email: *

Verification: *