Question 1

The best place to identify assets is in the use case documentation.

Accepted Answer

A) True 
 B)False  True

Question 2

Software requirements describe the how in software applications.

Accepted Answer

A) True 
 B)False  False

Question 3

What is a software asset?

Accepted Answer

A)  Anything of value to the users 
B)  Anything of value to the developers 
C)  Anything of value to the stakeholders 
D)  Anything of value to the project managers 
A)  Anything of value to the users 
B)  Anything of value to the developers 
C)  Anything of value to the stakeholders 
D)  Anything of value to the project managers C

Question 4

Every countermeasure created is a new software requirement for the functionality use case.

Accepted Answer

A) True 
 B)False

Question 5

How can a de-compiler be used in a software attack?

Accepted Answer

A)  Corrupt binary data 
B)  Launch a DOS 
C)  Turn binary code into ASCII 
D)  Recompile the code again 
A)  Corrupt binary data 
B)  Launch a DOS 
C)  Turn binary code into ASCII 
D)  Recompile the code again

Question 6

What is analysis paralysis?

Accepted Answer

A)  Analyst is forever writing and rewriting specifications 
B)  Analyst cannot document requirements 
C)  Analyst does not create software requirement artifacts 
D)  Analyst helps the developers write software requirements 
A)  Analyst is forever writing and rewriting specifications 
B)  Analyst cannot document requirements 
C)  Analyst does not create software requirement artifacts 
D)  Analyst helps the developers write software requirements

Question 7

Translating informational data into real dollars is the easiest part of asset valuation.

Accepted Answer

A) True 
 B)False

Question 8

Businesses are seeing security requirements gathering becoming just as important as functionality requirements gathering.

Accepted Answer

A) True 
 B)False

Question 9

The software requirements come in three levels: high, vague, and low.

Accepted Answer

A) True 
 B)False

Question 10

What should the developer do if there is a lot of unanswered questions during your analysis?

Accepted Answer

A)  Code the application with what is known and work out the kinks later 
B)  Push the requirements back to the BAs 
C)  Code what you can and fill in the blanks later 
D)  Code now and weed out issues in testing 
A)  Code the application with what is known and work out the kinks later 
B)  Push the requirements back to the BAs 
C)  Code what you can and fill in the blanks later 
D)  Code now and weed out issues in testing

Question 11

The easiest part of tool selection is knowing what the options are.

Accepted Answer

A) True 
 B)False

Question 12

JAD session are:

Accepted Answer

A)  Joint Application Details 
B)  Joint Agreement Development 
C)  Joint Application Design 
D)  Joint Application Development 
A)  Joint Application Details 
B)  Joint Agreement Development 
C)  Joint Application Design 
D)  Joint Application Development

Question 13

What artifact is the opposite of a use case?

Accepted Answer

A)  Functional spec 
B)  Misuse case 
C)  Design case 
D)  Software attack 
A)  Functional spec 
B)  Misuse case 
C)  Design case 
D)  Software attack

Question 14

Why are fail safe requirements?

Accepted Answer

A)  What should the application do when it starts up 
B)  What the user does when the application crashes 
C)  What should the application do when a failed attempt to call a program or service occurs 
D)  What should the application do if it senses threats 
A)  What should the application do when it starts up 
B)  What the user does when the application crashes 
C)  What should the application do when a failed attempt to call a program or service occurs 
D)  What should the application do if it senses threats

Question 15

What is the difference between high and low assets?

Accepted Answer

A)  Very secure (high) and important but not critical (low) 
B)  Needed (high) and not needed (low) 
C)  Secure (high) and not secure (low) 
D)  Secure (high) and functional (low) 
A)  Very secure (high) and important but not critical (low) 
B)  Needed (high) and not needed (low) 
C)  Secure (high) and not secure (low) 
D)  Secure (high) and functional (low)

Question 16

What are the three types of software requirements?

Accepted Answer

A)  High; medium; and low 
B)  High; medium; and detailed 
C)  High; detailed; and low 
D)  Overview; medium; and low 
A)  High; medium; and low 
B)  High; medium; and detailed 
C)  High; detailed; and low 
D)  Overview; medium; and low

Question 17

What is scope creep?

Accepted Answer

A)  New requirements creep in the development process with no analysis 
B)  New requirements that are not clarified 
C)  When developers code software not needed 
D)  When requirements need to be redone 
A)  New requirements creep in the development process with no analysis 
B)  New requirements that are not clarified 
C)  When developers code software not needed 
D)  When requirements need to be redone

Question 18

Good communication is not a necessary skill to have in order to be a good developer.

Accepted Answer

A) True 
 B)False

Question 19

Asset classification can be carried out in many ways, but the easiest method is to label assets with basic high/low terms.

Accepted Answer

A) True 
 B)False

Question 20

Detailed use case requirements can come in multiple forms: UML, MS Word documents, and even emails.

Accepted Answer

A) True 
 B)False

The best place to identify assets is in the use case documentation.

Software requirements describe the how in software applications.

What is a software asset?

Every countermeasure created is a new software requirement for the functionality use case.

How can a de-compiler be used in a software attack?

What is analysis paralysis?

Translating informational data into real dollars is the easiest part of asset valuation.

Businesses are seeing security requirements gathering becoming just as important as functionality requirements gathering.

The software requirements come in three levels: high, vague, and low.

What should the developer do if there is a lot of unanswered questions during your analysis?

The easiest part of tool selection is knowing what the options are.

JAD session are:

What artifact is the opposite of a use case?

Why are fail safe requirements?

What is the difference between high and low assets?

What are the three types of software requirements?

What is scope creep?

Good communication is not a necessary skill to have in order to be a good developer.

Asset classification can be carried out in many ways, but the easiest method is to label assets with basic high/low terms.

Detailed use case requirements can come in multiple forms: UML, MS Word documents, and even emails.

Why You Need to Learn Secure Programming

Coding in the Sdlc: Not a Solitary Practice

Principles of Security and Quality

Getting Organized: What to Do on Day One

Designing for Quality: the Big Picture

Designing for Security

Development Tools: Choose Wisely

Coding in the Cube: Developing Good Habit

Testing for Quality and Security

Maintain Your Software, Maintain Your Career

Filters

Exam 5: Software Requirements: Hear What They Say, Know What They Mean, Protect What They Own

The best place to identify assets is in the use case documentation.

Software requirements describe the how in software applications.

What is a software asset?

Every countermeasure created is a new software requirement for the functionality use case.

How can a de-compiler be used in a software attack?

What is analysis paralysis?

Translating informational data into real dollars is the easiest part of asset valuation.

Businesses are seeing security requirements gathering becoming just as important as functionality requirements gathering.

The software requirements come in three levels: high, vague, and low.

What should the developer do if there is a lot of unanswered questions during your analysis?

The easiest part of tool selection is knowing what the options are.

JAD session are:

What artifact is the opposite of a use case?

Why are fail safe requirements?

What is the difference between high and low assets?

What are the three types of software requirements?

What is scope creep?

Good communication is not a necessary skill to have in order to be a good developer.

Asset classification can be carried out in many ways, but the easiest method is to label assets with basic high/low terms.

Detailed use case requirements can come in multiple forms: UML, MS Word documents, and even emails.

Why You Need to Learn Secure Programming

Coding in the Sdlc: Not a Solitary Practice

Principles of Security and Quality

Getting Organized: What to Do on Day One

Designing for Quality: the Big Picture

Designing for Security

Development Tools: Choose Wisely

Coding in the Cube: Developing Good Habit

Testing for Quality and Security

Maintain Your Software, Maintain Your Career

Filters