IAS1 - LAP 6 - 3D

What is the primary goal of secure software development?

• To create software that is easy to use

• To minimize software costs

• To ensure software can be deployed securely

• To maximize software functionality

Which of the following is a common software security problem?

• Buffer overflow

• Data encryption

• User authentication

• Software updates

What does the acronym SDLC stand for?

• Secure Data Life Cycle

• System Design Life Cycle

• Software Development Life Cycle

• Software Deployment Life Cycle

Which principle states that every access must be checked for authority?

• Least privilege

• Open design

• Separation of privilege

• Complete mediation

What is a command injection vulnerability?

• A type of malware

• A failure to validate user input

• A network security breach

• An error in data storage

What is the purpose of the Software Assurance Initiative launched by the DoD?

• To enhance user interface design

• To develop new programming languages

• To reduce software costs

• To create a common body of knowledge for secure software development

Which of the following is NOT a software development security problem?

• Cross-site scripting

• SQL injection

• Buffer overflow

• Data encryption

What does 'least privilege' mean in software security?

• Programs should operate with minimal permissions

• Users should have maximum access

• All users should have the same access level

• Access should be granted based on user requests

What is a buffer overflow?

• A type of denial-of-service attack

• An application error due to excessive data input

• A method of data encryption

• A secure coding practice

Which of the following is a method to protect against shoulder surfing?

• Regularly updating software

• Encrypting data

• Covering the keyboard while typing

• Using strong passwords