D487 Secure Software Design - Set 2 - Part 2

Test your knowledge of technical writing concepts with these practice questions. Each question includes detailed explanations to help you understand the correct answers.

Question 21: What is the term for techniques used to ensure the availability of data and services in the event of an attack?

Disaster recovery

Business continuity planning

Data redundancy

Security audits

Question 22: Which of the following best describes a zero-day vulnerability?

A vulnerability that has been publicly disclosed

A vulnerability that is exploited before a patch is available

A vulnerability that is mitigated through user education

A vulnerability that only affects specific software versions

Question 23: What is the function of a web application firewall (WAF)?

To monitor network traffic

To filter and monitor HTTP traffic to and from a web application

To encrypt data in transit

To manage user sessions

Question 24: Which security model enforces access controls based on security clearances and classifications?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

Question 25: What is the primary purpose of using secure sockets layer (SSL) or transport layer security (TLS)?

To provide data integrity

To ensure secure data transmission over the internet

To enhance application performance

To enable user authentication

Question 26: Which type of testing focuses specifically on identifying security vulnerabilities in an application?

Unit testing

Functional testing

Security testing

Performance testing

Question 27: What is a primary advantage of conducting security training for employees?

To improve coding skills

To reduce operational costs

To increase awareness of security threats

To enhance software development speed

Question 28: Which of the following is a potential consequence of a data breach?

Increased customer trust

Financial loss

Improved software performance

Enhanced brand reputation

Question 29: What is the main goal of incident response planning?

To prevent all cyber attacks

To establish procedures for responding to security incidents

To train employees on software development

To improve customer service

Question 30: Which of the following practices is essential for secure software deployment?

Using outdated software

Disabling security features

Conducting vulnerability assessments

Ignoring access controls

Question 31: What is the purpose of a security policy in an organization?

To define user roles and responsibilities

To outline the organizations approach to security

To establish performance metrics

To improve customer relations

Question 32: Which type of malware disguises itself as legitimate software?

Worm

Trojan horse

Ransomware

Adware

Question 33: What is the function of a digital certificate?

To encrypt data in transit

To verify the identity of an entity

To provide a backup of data

To monitor network traffic

Question 34: What is the main benefit of using strong passwords?

To enhance user experience

To prevent unauthorized access

To comply with regulatory requirements

To simplify user login

Question 35: Which security principle emphasizes the need to document all security policies and procedures?

Accountability

Least privilege

Defense in depth

Fail-safe defaults

Question 36: Which of the following is a technique to mitigate cross-site request forgery (CSRF) attacks?

Input validation

Token-based authentication

SQL injection prevention

Session timeout

Question 37: What is the primary objective of a penetration test?

To improve software design

To evaluate network performance

To simulate real-world attacks and identify vulnerabilities

To assess user satisfaction

Question 38: What is the term for the practice of conducting a thorough examination of an organizations security posture?

Security audit

Vulnerability assessment

Risk assessment

Compliance check

Question 39: Which of the following is a common method for ensuring data integrity?

Data compression

Data encryption

Hashing

Data replication

Question 40: What is the function of a security information and event management (SIEM) system?

To perform data backups

To analyze security alerts in real time

To manage user access rights

To conduct vulnerability scans

Don't Want to Study?

Save Time on Studies, Spend More with Family & Friends! Pay-After-you-Pass!

Get Exam Support