Exam 3: Principles of Security and Quality

The principle of maintainability includes the tenet that the application is able to run itself.

Which principle tells the developer to code multiple layers of types of protection?

Which principle tells the developer to allow the user access to only what is need for that user's job?

What is attained by creating code that can change meaning on demand?

What is attained by creating code that can be easily modified without affecting the application as a whole?

The Information Systems Security Association's (ISSA) main purpose is to promote practices that will ensure the confidentiality, integrity and availability of organizational information resources.

CONSTANTS are values that are changeable within a programming language.

What is attained by giving the user community training resources, help guides, and user manuals?

Why is software quality an art form?

Quality code means writing software for an intended purpose that must work when needed.

What principle might tell the developer to create one server that creates security keys and another server that stores the keys?

The principle of Least Privilege states that you should give users the least amount of privilege required to perform their use case functionality.

What is attained by keeping an application operative when needed?

If complexity can neither be removed nor automated, it should be what?

Authentication ensures that the user has the appropriate role and privilege to view data.

The goal of SWEBOK is to define a clear set of boundaries and materials that make up software development from an engineering perspective.

The integrity of the application is defined by the way in which the application accepts, transmits and stores data.

Secure code does not allow who to access the software's assets?

How can a developer fight back from software attacks?

An asset is a valued resource that the application has to protect.