Module-12 Secure Software Development

During the software development life cycle (SDLC), which phase primarily focuses on ensuring that the system requirements are accurately transformed into a complete and detailed system design?

• Planning phase

• Software or systems design phase

• Implementation phase

• Testing phase

Which software development model is best suited for a project that requires rapid iteration, flexibility, and continuous customer feedback?

• Waterfall model

• Agile model

• DevOps

• V-Model

In software testing, which method involves testing the internal structures or workings of an application rather than its functionality?

• Black box testing

• White box testing

• Grey box testing

• Functional testing

What type of software vulnerability allows an attacker to execute arbitrary code remotely on a victim's machine?

• Buffer overflow

• Directory traversal

• Remote code execution

• Cross-Site Scripting (XSS)

Which type of error occurs when a program's source code has been written in a way that violates the syntax rules of the programming language?

• Runtime error

• Syntax error

• Logic error

• Structural error

Which analysis method involves reviewing the source code of a software program without executing the code?

• Dynamic analysis

• Static analysis

• Black box testing

• Grey box testing

What is a race condition in the context of secure software development?

• A condition where an application performs slower than expected

• A condition where two or more threads or processes attempt to change shared data at the same time

• A condition where input validation is not properly enforced

• A condition where code execution continues after an exception is thrown

Which best security coding practice involves ensuring that the software continues to operate in a secure state even when errors occur?

• Least privileges

• Input validation

• Fail securely

• Code signing

What type of software vulnerability can occur when untrusted data is sent to a web browser without proper validation and escaping, potentially leading to malicious code execution?

• Cross-Site Scripting (XSS)

• SQL Injection

• Buffer overflow

• Cross-Site Request Forgery (CSRF)

Which practice helps minimize attack surfaces in secure software development?

• Using least privileges

• Regular patching of known vulnerabilities

• Secure defaults

• All of the above