Online Access Free Secure-Software-Design Exam Questions

Which concept is demonstrated when every module in a particular abstraction layer of a computing environment can only access the information and resources that are necessary for its legitimate purpose?

• A.Confidentiality
• B.Principle of Least Privilege
• C.Privacy
• D.Elevation of Privilege

Using a web-based common vulnerability scoring system (CVSS) calculator, a security response team member performed an assessment on a reported vulnerability in the company's claims intake component. The base score of the vulnerability was 3.5 and changed to 5.9 after adjusting temporal and environmental metrics.
Which rating would CVSS assign this vulnerability?

• A.Low severity
• B.High severity
• C.Critical severity
• D.Medium severity

Which threat modeling methodology involves creating or using collections of similar threats?

• A.Attack Libraries
• B.Security Profile
• C.Data Flow Diagrams
• D.Attack Trees

A public library needs to implement security control on publicly used computers to prevent illegal downloads.
Which security control would prevent this threat?

• A.Nonrepudiation
• B.Authentication
• C.Integrity
• D.Availability

The software security team prepared a detailed schedule napping security development lifecycle phases to the type of analysis they will execute.
Which design and development deliverable aid the team prepare?

• A.Updated threat modeling artifacts
• B.Design security review
• C.Privacy implementation assessment results
• D.Security test plans