NEW
Font size
WorksheetsSSDLC
Total questions: 28
Worksheet time: 13mins
Phase 1:
Requirement Analysis and Definition Phase
Continue...
Don't Click!
What is the primary goal of threat modeling in the Requirements phase?
To speed up development
To identify potential security threats and vulnerabilities
To design the user interface
To write code
Which of the following is a key output of a Risk Assessment?
A list of functional requirements
A prioritized list of security risks
A user interface mockup
A project timeline
What is the purpose of Security Requirements Gathering?
To define specific security measures aligned with project goals
To write code faster
To design the database schema
To create a project timeline
Why is it important to document security requirements early in the SDLC?
To delay the project timeline
To reduce the cost of fixing vulnerabilities later
To ignore potential threats
To focus only on functional requirements
What is the role of a Security Requirements Traceability Matrix (SRTM)?
To track the progress of development
To map security requirements to specific risks
To design the user interface
To write test cases
Phase 2:
Design Phase
Continue ...
Don't Click!
What is the primary goal of Secure Architecture Design?
To create a visually appealing user interface
To incorporate security best practices into the system design
To write code faster
To ignore potential threats
Which of the following is a key principle of Secure Architecture Design?
Least privilege
Hardcoded credentials
Ignoring error handling
Using outdated libraries
What is the purpose of Security Control Selection in the Design phase?
To choose and implement controls that safeguard against potential threats
To write functional requirements
To design the database schema
To create a project timeline
Which of the following is an example of a security control?
Input validation
Hardcoded passwords
Ignoring logs
Disabling firewalls
Phase 3:
Implementation Phase
Continue ...
Don't Click!
What is the primary goal of Secure Coding Practices?
To speed up development
To design the user interface
To mitigate common security vulnerabilities
To ignore potential threats
Which of the following is an example of a secure coding practice?
Using hardcoded credentials
Validating user input
Ignoring error handling
Using outdated libraries
What is the purpose of Code Reviews in the Implementation phase?
To identify and address potential security issues proactively
To write functional requirements
To design the database schema
To create a project timeline
What is the role of static code analysis tools in the Implementation phase?
To create a project timeline
To design the database schema
To test the user interface
To identify security vulnerabilities in the code
Phase 4:
Testing Phase
Continue ..
Don't Click!
What is the purpose of Static Analysis in the Testing phase?
To analyze code without execution to find security vulnerabilities
To test the user interface
To design the database schema
To create a project timeline
What is the primary goal of Dynamic Analysis in the Testing phase?
To write functional requirements
To evaluate running code for vulnerabilities in real-time
To create a project timeline
To design the database schema
What is the role of a Security Test Plan in the Testing phase?
To write code
To design the user interface
To outline the approach for security testing
To create a project timeline
Phase 5:
Deployment Phase
Continue ...
Don't Click
What is the purpose of Configuration Management in the Deployment phase?
To ensure secure configurations during deployment
To write functional requirements
To design the database schema
To create a project timeline
Why is Security Patching important during the Deployment phase?
To address known vulnerabilities and enhance system security
To write code
To design the user interface
To manage the project budget
Which of the following is a common deployment vulnerability?
Use of secure protocols
Misconfigured servers
Proper error handling
Encryption of sensitive data
Phase 6:
Maintenance Phase
Continue ...
Don't Click
What is the purpose of Incident Response Planning in the Maintenance phase?
To develop a plan to respond effectively to security incidents
To write code
To design the user interface
To create a project timeline
What is the role of Continuous Monitoring in the Maintenance phase?
To detect and respond to ongoing security threats
To write functional requirements
To design the database schema
To create a project timeline
Which of the following is a common maintenance vulnerability?
Use of secure protocols
Unpatched software
Proper error handling
Encryption of sensitive data
