Question 1

Podcasts are online videos that can be used for training, instructions, or demonstrations.

Accepted Answer

A) True 
 B)False  False

Question 2

Bypassing the CCB process gives the developer more time to guard against security vulnerabilities in the application.

Accepted Answer

A) True 
 B)False  False

Question 3

Once the project is in maintenance mode, the developer can relax a little with the details of the requirement process.

Accepted Answer

A) True 
 B)False  False

Question 4

What is the best way project management can ensure change requests (CR) are appropriately managed?

Accepted Answer

A)  let the team leads handle CRs 
B)  make sure all CRs are testes 
C)  put all CR through he normal development methodology 
D)  create a Change Control Board (CC
B)  
A)  let the team leads handle CRs 
B)  make sure all CRs are testes 
C)  put all CR through he normal development methodology 
D)  create a Change Control Board (CC
B)

Question 5

Sensing activities does not help the code protect itself.

Accepted Answer

A) True 
 B)False

Question 6

According to the Organization for Internet Safety (OIS), which of the following steps for a threat response process does the organization verify the attack?

Accepted Answer

A)  Notification 
B)  Investigation 
C)  Resolution: 
D)  Discovery 
A)  Notification 
B)  Investigation 
C)  Resolution: 
D)  Discovery

Question 7

The Applications Guide doesn't need rules in place to be successful.

Accepted Answer

A) True 
 B)False

Question 8

The duty of responding to attacks is to maintain the security integrity of the software throughout its useful lifetime.

Accepted Answer

A) True 
 B)False

Question 9

Ajax does not have any security vulnerabilities.

Accepted Answer

A) True 
 B)False

Question 10

How can one scout for incidents?

Accepted Answer

A)  Ask a friend 
B)  Hold weekly incident meetings 
C)  look at US-CERT database 
D)  watch error logs 
A)  Ask a friend 
B)  Hold weekly incident meetings 
C)  look at US-CERT database 
D)  watch error logs

Question 11

In order to support the application's operations, everyone on the team must sustain secure software until the application retires.

Accepted Answer

A) True 
 B)False

Question 12

Learning new technologies and networking with your peers are two ways to show initiative.

Accepted Answer

A) True 
 B)False

Question 13

The developer can help sustain the formaility in the development process during maintenance by creating a change control board.

Accepted Answer

A) True 
 B)False

Question 14

Monitoring error logs and responding to immediate issues is a great way to stay proactive in the secure software process.

Accepted Answer

A) True 
 B)False

Question 15

Reactive measures are plans and polices that outline the proper response to an incident.

Accepted Answer

A) True 
 B)False

Question 16

What do sensing activities include?

Accepted Answer

A)  how to provide estimates 
B)  how to monitor, test, and review code for threats and vulnerabilities 
C)  how to upgrade software 
D)  update the Application Guide 
A)  how to provide estimates 
B)  how to monitor, test, and review code for threats and vulnerabilities 
C)  how to upgrade software 
D)  update the Application Guide

Question 17

Wikis are online resources that can be used to define common elements of the application, department or company.

Accepted Answer

A) True 
 B)False

Question 18

A managerial policy is not necessary to include in the Application Guide.

Accepted Answer

A) True 
 B)False

Question 19

Software assurance means that your code is secure.

Accepted Answer

A) True 
 B)False

Question 20

Why are new developers somewhat of a risk to the security of the software?

Accepted Answer

A)  they don't have the background knowledge that the developers who wrote the software do 
B)  they may not know the CCB process 
C)  they might know how to report incidents 
D)  they may not know the Application Guide 
A)  they don't have the background knowledge that the developers who wrote the software do 
B)  they may not know the CCB process 
C)  they might know how to report incidents 
D)  they may not know the Application Guide

Podcasts are online videos that can be used for training, instructions, or demonstrations.

Bypassing the CCB process gives the developer more time to guard against security vulnerabilities in the application.

Once the project is in maintenance mode, the developer can relax a little with the details of the requirement process.

What is the best way project management can ensure change requests (CR) are appropriately managed?

Sensing activities does not help the code protect itself.

According to the Organization for Internet Safety (OIS), which of the following steps for a threat response process does the organization verify the attack?

The Applications Guide doesn't need rules in place to be successful.

The duty of responding to attacks is to maintain the security integrity of the software throughout its useful lifetime.

Ajax does not have any security vulnerabilities.

How can one scout for incidents?

In order to support the application's operations, everyone on the team must sustain secure software until the application retires.

Learning new technologies and networking with your peers are two ways to show initiative.

The developer can help sustain the formaility in the development process during maintenance by creating a change control board.

Monitoring error logs and responding to immediate issues is a great way to stay proactive in the secure software process.

Reactive measures are plans and polices that outline the proper response to an incident.

What do sensing activities include?

Wikis are online resources that can be used to define common elements of the application, department or company.

A managerial policy is not necessary to include in the Application Guide.

Software assurance means that your code is secure.

Why are new developers somewhat of a risk to the security of the software?

Why You Need to Learn Secure Programming

Coding in the Sdlc: Not a Solitary Practice

Principles of Security and Quality

Getting Organized: What to Do on Day One

Software Requirements: Hear What They Say, Know What They Mean, Protect What They Own

Designing for Quality: the Big Picture

Designing for Security

Development Tools: Choose Wisely

Coding in the Cube: Developing Good Habit

Testing for Quality and Security

Filters

Exam 11: Maintain Your Software, Maintain Your Career

Podcasts are online videos that can be used for training, instructions, or demonstrations.

Bypassing the CCB process gives the developer more time to guard against security vulnerabilities in the application.

Once the project is in maintenance mode, the developer can relax a little with the details of the requirement process.

What is the best way project management can ensure change requests (CR) are appropriately managed?

Sensing activities does not help the code protect itself.

According to the Organization for Internet Safety (OIS), which of the following steps for a threat response process does the organization verify the attack?

The Applications Guide doesn't need rules in place to be successful.

The duty of responding to attacks is to maintain the security integrity of the software throughout its useful lifetime.

Ajax does not have any security vulnerabilities.

How can one scout for incidents?

In order to support the application's operations, everyone on the team must sustain secure software until the application retires.

Learning new technologies and networking with your peers are two ways to show initiative.

The developer can help sustain the formaility in the development process during maintenance by creating a change control board.

Monitoring error logs and responding to immediate issues is a great way to stay proactive in the secure software process.

Reactive measures are plans and polices that outline the proper response to an incident.

What do sensing activities include?

Wikis are online resources that can be used to define common elements of the application, department or company.

A managerial policy is not necessary to include in the Application Guide.

Software assurance means that your code is secure.

Why are new developers somewhat of a risk to the security of the software?

Why You Need to Learn Secure Programming

Coding in the Sdlc: Not a Solitary Practice

Principles of Security and Quality

Getting Organized: What to Do on Day One

Software Requirements: Hear What They Say, Know What They Mean, Protect What They Own

Designing for Quality: the Big Picture

Designing for Security

Development Tools: Choose Wisely

Coding in the Cube: Developing Good Habit

Testing for Quality and Security

Filters