CISSP 6: Software Development

Threat modeling includes a series of steps. Which of the following is not one of those steps?

• Agile

• V-shaped

• Waterfall

• Iterative

What is the difference between source code and object code?

• Source code consists of human-readable statements. Object code is the binary machine language executed by the CPU (central processing unit).

• Source code expresses a program's required function. Object code is the binary machine language executed by the CPU (central processing unit).

• Object code consists of human-readable statements. Source code is the binary machine language executed by the CPU (central processing unit).

• Source code consists of human-readable statements. Object code expresses a program's required function.

Of these programming languages, which is considered the lowest level language?

• Compiled

• Assembly

• Interpreted

• None of the options

Java, C++, Python, and Delphi are examples of object-oriented programming (OOP). This programming concept focuses on objects as opposed to actions. Which of the following allows methods to behave differently depending on the type of argument to which they are applied?

• Inheritance

• Encapsulation

• Polymorphism

• Polyinstantiation

What is the difference between DevOps and DevSecOps?

• As DevOps focuses primarily on rapid delivery of new and updated code into operational use, it relies on other processes to address security considerations. DevSecOps integrates security review and assessment into the total design, development and deployment workflow.

• DevSecOps integrates security testing and assessment into the operational use of software, while DevOps performs security testing and assessment activities throughout the lifecycle.

• Very little. Originally, DevOps did not explicitly consider security activities in its rapid development and release to operational use of new and modified software. Market pressure, and the creation of the competing DevSecOps model, has caused these two models to become more similar than different.

• DevOps emphasizes the use of IDEs and CM tools, while DevSecOps emphasizes the use of CI and CD processes.

What is the difference between continuous integration (CI) and continuous delivery (CD)?

• CI requires that changes to code are frequently updated to a code repository and tested using an automated process. CD focuses on moving the changes into production.

• CD requires that changes to code are frequently updated to a code repository and tested using an automated process. CI focuses on moving the changes into production.

• CI is a purely manual process whereby changes to code are fed directly back into existing code without prior testing. CD focuses on quickly responding to the customer’s needs.

• CD is a purely manual process whereby changes to code are fed directly back into existing code without prior testing. CI focuses on quickly responding to the customer’s needs.

Databases require lock controls to maintain the internal integrity of the data. But there is another set of requirements in a database environment. These requirements are known as the ACID test. Which of these four tests ensure transactions are invisible to other users? 

• Atomicity 

• Consistence 

• Isolation 

• Durability 

Well-defined, structured sequence of stages in software engineering to develop the intended software product.

• SDLC

• SDLC

• SLDC

• SLCD

Refers to an injection attack wherein an attacker can execute malicious SQL statements (aka: a malicious payload) that control a web applications's database server (aka: a Relational Database Management System - RDBMS)

• Error-based SQLi
• SQL Injection (SQLi)
• Union-based SQLi
• Blink SQLi
• SQL

What is the correct hierarchy of elements for a database schema (overall design / organization) ?

• Record, Field, Database, File (Table)

• Database, Record, Field, File (Table)

• Database, File (Table), Record, Field

• Database, File (Table), Field, Record