Deck 11: Defense in Depth, Software Development, and Data Analytics

Question 1

A layer of protection called ______________ (from Greek words meaning "hidden writing") is the practice of transforming information so it is secure and cannot be accessed by unauthorized parties.

Answer 1

Cryptography

Question 2

What aspect of job rotation requires teaching employees to perform multiple job functions besides the ones for which they were hired?

Answer 2

Cross training

Question 3

Which of the following security protections afforded by cryptography ensures that only authorized parties can view information?

A) Integrity
B) Confidentiality
C) Authentication
D) Non-repudiation

Answer 3

Confidentiality

Question 4

The costs associated with providing cybersecurity protections have plateaued and will probably remain constant over the next few years.

Question 5

In which of the following cloud services does the customer has the highest level of control?

A) Software as a service (SaaS)
B) Platform as a service (PaaS)
C) Infrastructure as a service (IaaS)
D) Virtualization as a service (VaaS)

Question 6

What is another name for dynamic code analysis?

Question 7

In the context of cybersecurity, what is fuzzing?

Question 8

What element of quality assurance helps to ensure that resolved prior vulnerabilities continue to stay secure and that changes to the code do not inadvertently create new flaws that can break the application or cause unwanted results?

Question 9

Which of the following SDLC best practices determines if software can withstand the workload placed on it without crashing and includes verification that the software can respond in a timely fashion to a high number of simultaneous users?

A) Security requirements definition
B) User acceptance testing
C) Input validation
D) Application stress testing

Question 10

To ensure an efficient process, software testing should only be performed after coding is completed.