SSDLC

Phase 1:
Requirement Analysis and Definition Phase

• Continue...

• Don't Click!

What is the primary goal of threat modeling in the Requirements phase?

• To speed up development

• To identify potential security threats and vulnerabilities

• To design the user interface

• To write code

Which of the following is a key output of a Risk Assessment?

• A list of functional requirements

• A prioritized list of security risks

• A user interface mockup

• A project timeline

What is the purpose of Security Requirements Gathering?

• To define specific security measures aligned with project goals

• To write code faster

• To design the database schema

• To create a project timeline

Why is it important to document security requirements early in the SDLC?

• To delay the project timeline

• To reduce the cost of fixing vulnerabilities later

• To ignore potential threats

• To focus only on functional requirements

What is the role of a Security Requirements Traceability Matrix (SRTM)?

• To track the progress of development

• To map security requirements to specific risks

• To design the user interface

• To write test cases

Answer explanation

It ensures that all security requirements are identified and investigated. Each row of the matrix identifies a specific requirement and provides the details of how it was tested or analyzed and the results.

Phase 2:
Design Phase

• Continue ...

• Don't Click!

What is the primary goal of Secure Architecture Design?

• To create a visually appealing user interface

• To incorporate security best practices into the system design

• To write code faster

• To ignore potential threats

Which of the following is a key principle of Secure Architecture Design?

• Least privilege

• Hardcoded credentials

• Ignoring error handling

• Using outdated libraries

What is the purpose of Security Control Selection in the Design phase?

• To choose and implement controls that safeguard against potential threats

• To write functional requirements

• To design the database schema

• To create a project timeline