review3

What is the main focus of the Software Development Life Cycle (SDLC) as described in the introduction?

• Ensuring software is well written and secure throughout its lifespan

• Increasing the speed of software development

• Reducing the cost of hardware

• Improving user interface design

Which learning outcome expects students to analyze indicators of malicious activity?

• Explain various types of vulnerabilities

• Analyze indicators of malicious activity

• Apply common security techniques to computing resources

• Explain the importance of automation and orchestration

According to the introduction, why is it important for a security practitioner to understand the SDLC?

• To ensure the software is secure throughout its lifespan

• To reduce the number of developers needed

• To increase the marketing potential of the software

• To improve the graphical design of the software

Which of the following is a reason for learning about software vulnerabilities as mentioned in the introduction?

• To recognize and defend against software security exploits

• To improve the speed of software installation

• To enhance the visual appearance of applications

• To reduce the cost of software licenses

Which activity is NOT explicitly mentioned as a learning outcome for this chapter?

• Explaining various activities associated with vulnerability management

• Applying common security techniques to computing resources

• Designing new programming languages

• Explaining the importance of automation and orchestration related to secure operations

Which of the following best describes the purpose of the Software Development Life Cycle (SDLC)?

• To describe the steps in a model for software development throughout its life

• To provide only coding guidelines for developers

• To ensure only the design phase is completed

• To eliminate the need for user training

What is typically included in the SDLC after software is in production?

• Only coding and testing

• User training, maintenance, and decommissioning

• Only design and rollout

• Only planning and requirements gathering

Which phase in the SDLC typically comes immediately after the coding phase?

• Planning

• Testing

• Requirements

• Decommissioning

Why is the SDLC considered useful for organizations and developers?

• It provides a consistent framework to structure workflow and planning

• It eliminates the need for any planning

• It only focuses on coding and testing

• It is only used for small projects

During the planning phase of the SDLC, what is the main focus?

• Conducting initial investigations and considering alternative solutions

• Writing code for the application

• Training users on the software

• Decommissioning the software