Which secure software design principle assumes attackers have the source code and specifications of the product?

• A.Separation of Privileges
• B.Psychological Acceptability
• C.Total Mediation
• D.Open Design

Comment: *

Name: *

Email: *

Verification: *

What are the three primary goals of the secure software development process?

• A.Performance, reliability, and maintainability
• B.Cost, speed to market, and profitability
• C.Redundancy, scalability, and portability
• D.Confidentiality, integrity, and availability

Comment: *

Name: *

Email: *

Verification: *

Which category classifies identified threats that do not have defenses in place and expose the application to exploits?

• A.Fully mitigated threat
• B.Threat profile
• C.Unmitigated threats
• D.Partially mitigated threat

Comment: *

Name: *

Email: *

Verification: *

Which concept is demonstrated when every module in a particular abstraction layer of a computing environment can only access the information and resources that are necessary for its legitimate purpose?

• A.Confidentiality
• B.Principle of Least Privilege
• C.Privacy
• D.Elevation of Privilege

Comment: *

Name: *

Email: *

Verification: *

What refers to the review of software source code by developers other than the original coders to try to identify oversights, mistakes, assumptions, a lack of knowledge, or even experience?

• A.User acceptance testing
• B.Manual peer review
• C.Fault injection
• D.Dynamic code review

Comment: *

Name: *

Email: *

Verification: *