D487 Secure Software Design - Set 1 - Part 3

Correct Answer: Implement identity and access management (IAM) controls

Implementing IAM controls helps manage user access and permissions, ensuring that only authorized users can access cloud resources, which is essential for cloud security.

Correct Answer: Ensuring secure remote access to company resources

Ensuring secure remote access is crucial to protect sensitive information as employees work from home, preventing unauthorized access to company systems.

Correct Answer: Implement a clear policy on acceptable use

A clear policy on acceptable use sets expectations for employees regarding the use of personal accounts for work tasks, helping to mitigate risks while providing guidelines for compliance.

Correct Answer: Provide secure coding training for developers

Providing secure coding training equips developers with the knowledge and skills needed to follow secure coding practices from the outset, which is essential for building secure applications.

Correct Answer: Compliance with legal and regulatory requirements

Ensuring compliance with legal and regulatory requirements is critical for a data retention policy, as failure to do so can result in legal penalties and other consequences.

Correct Answer: Reduce security incidents caused by human error

The primary goal of a security awareness program is to educate employees on security best practices to minimize the risk of security incidents resulting from human error.

Correct Answer: Identify potential threats and vulnerabilities

Identifying potential threats and vulnerabilities is the first step in a risk assessment process, as it provides the foundation for evaluating and prioritizing risks.

Correct Answer: Defined roles and responsibilities

Clearly defined roles and responsibilities are crucial for ensuring an effective incident response, as they facilitate coordination and accountability during an incident.

Correct Answer: Provide employee training on recognizing threats

Training employees to recognize threats, including phishing and suspicious links, is a proactive measure that can significantly reduce the risk of ransomware attacks, as many attacks are initiated through user actions.

Correct Answer: The library's security track record

Evaluating the library's security track record is crucial to ensure it does not introduce vulnerabilities into the application, outweighing other factors such as popularity or documentation.