D487 - Secure Software Design

Question 41: Which of the following is an essential practice for ensuring secure coding?

Avoiding error handling

Conducting regular code reviews

Ignoring user input

Relying on third-party libraries only

Question 42: What does the term "ransomware" refer to?

Malware that collects user data

Software that locks users out of their system until a ransom is paid

A tool for ethical hacking

A method for securing data

Question 43: What is a common method used to protect against brute-force attacks?

Implementing strong passwords

Allowing unlimited login attempts

Disabling account lockout policies

Using weak password policies

Question 44: Which of the following describes a phishing attack?

Exploiting software vulnerabilities

Tricking users into providing sensitive information

Using malware to disrupt services

Conducting unauthorized scans on networks

Question 45: What is the role of an access control list (ACL) in network security?

To track user activity

To define permissions for users or groups

To monitor network performance

To encrypt sensitive data

Question 46: What is the purpose of using firewalls in network security?

To enhance user experience

To filter incoming and outgoing network traffic

To improve network speed

To provide data storage

Question 47: Which of the following best describes the term "malware"?

Software designed to improve system performance

Software intended to damage or disrupt systems

Software used for data encryption

Software that enhances user productivity

Question 48: What is the primary focus of a risk assessment in cybersecurity?

To eliminate all risks

To identify, evaluate, and prioritize risks

To improve software usability

To enhance user productivity

Question 49: Which of the following security practices can help protect against insider threats?

Disabling monitoring systems

Conducting background checks

Allowing unrestricted access

Ignoring security policies

Question 50: What does "social engineering" refer to in the context of cybersecurity?

Developing secure software

Manipulating individuals into divulging confidential information

Conducting network scans

Encrypting sensitive data

D487 Secure Software Design - Set 2 - Part 3