D487 Secure Software Design - Set 3 - Part 2

Correct Answer: NIST Cybersecurity Framework

The NIST Cybersecurity Framework offers guidelines for organizations to manage and reduce cybersecurity risk, focusing on five core functions: identify, protect, detect, respond, and recover.

Correct Answer: To identify and evaluate security vulnerabilities in systems

A vulnerability assessment aims to identify weaknesses in systems and applications, enabling organizations to prioritize and address security risks.

Correct Answer: To oversee the organizations information security strategy

The CISO is responsible for developing and implementing the information security strategy, ensuring that the organizations data is protected against threats.

Correct Answer: Enhanced security and risk management throughout the development process

A secure SDLC integrates security practices into each phase of software development, helping to identify and mitigate risks early in the process.

Correct Answer: To manage user identities and control access to resources

IAM systems ensure that only authorized users have access to specific resources based on their identity and roles within the organization.

Correct Answer: To monitor and analyze security events in real time

A SIEM system aggregates and analyzes security data from various sources, helping organizations detect and respond to security incidents more effectively.

Correct Answer: Flexibility and scalability to meet changing needs

Cloud-based security solutions offer organizations the flexibility and scalability to adapt to evolving security requirements without significant upfront investments.

Correct Answer: Implementing WPA2 encryption

WPA2 encryption provides stronger security for wireless networks compared to WEP, helping to protect against unauthorized access.

Correct Answer: To verify the identity of the certificate holder

Digital certificates authenticate the identity of individuals or organizations in online transactions, ensuring secure communications.

Correct Answer: Combining two different methods of authentication

Two-factor authentication enhances security by requiring two different forms of verification, such as a password and a fingerprint.

Correct Answer: A vulnerability that is exploited before the vendor releases a fix

A zero-day vulnerability is a previously unknown flaw that attackers exploit before developers have had a chance to issue a fix.

Correct Answer: To evaluate the effectiveness of security measures

A security audit assesses an organizations security policies, procedures, and controls to identify weaknesses and improve security posture.

Correct Answer: To verify a user's identity

A security token is a physical or digital device that generates a unique code used to verify a user's identity during the authentication process.

Correct Answer: Phishing

Phishing is a method used by attackers to deceive individuals into providing personal information, such as usernames and passwords, often via email.

Correct Answer: To outline procedures for responding to security incidents

A security incident response plan provides a structured approach for managing and responding to security incidents, minimizing their impact.

Correct Answer: Software that appears legitimate but carries a hidden malicious payload

A Trojan horse deceives users by masquerading as a legitimate application, while it actually contains harmful software.

Correct Answer: Risk management and security controls

The NIST Cybersecurity Framework provides guidelines for managing cybersecurity risk and implementing effective security controls within organizations.

Correct Answer: To detect and remove malicious software

Antivirus software scans systems for malware and removes it, helping to protect computers from various types of cyber threats.

Correct Answer: Generic email address

Phishing emails often come from generic or suspicious email addresses, lacking personalization or legitimacy.

Correct Answer: To establish guidelines for protecting information assets

A security policy outlines the organization's approach to safeguarding its information and technology assets, providing a framework for security practices.