Question 1

Secure Sockets Layer (SSL) is a crytpographic protocol that uses two keys, known as certificates, to encrypt data in transit to a specific port on the Web server.

Accepted Answer

SSL does use two keys, known as certificates, to encrypt data in transit to a specific port on the Web server.

Question 2

Too much detail in the interaction diagram makes it more difficult to create class diagrams and code.

Accepted Answer

Interaction diagrams focus on the flow of messages and interactions between objects, not on the detailed class structure, so the level of detail in interaction diagrams does not directly affect the difficulty of creating class diagrams and code.

Question 3

Class diagrams are the software requirements specifications for each module in an application.

Accepted Answer

Class diagrams provide a visual representation of the classes, interfaces and their relationships in a module or system, and are one of the key components of software requirements specifications.

Question 4

It is not the responsibility of the developer to be aware of the costs of designing an application for an organization.

Accepted Answer

It is the responsibility of the developer to be aware of the costs of designing an application for an organization. This includes the cost of development, maintenance, support, and any other related costs. It is important for developers to work closely with their clients to understand their budget and requirements, and to provide cost-effective solutions that meet their needs.

Question 5

A signature contains the following: -The name of the method -The arguments that it takes as input -What the method returns

Accepted Answer

A signature includes the name of the method, its input arguments and its return type.

Question 6

If a person is going to hack into an application, the data objects will be the last thing they target.

Accepted Answer

Data objects are typically the main target of a hacker looking to extract valuable information from an application. They may also target other components of the application, but data objects are usually a primary target.

Question 7

Code signing can only work with HTTP.

Accepted Answer

Code signing can work with both HTTP and HTTPS protocols. However, using HTTPS is more secure as it encrypts the communication between the server and client, ensuring that the code has not been tampered with during transmission.

Question 8

Interaction diagrams focus more on how the software objects interact with themselves and other objects.

Accepted Answer

Interaction diagrams, also known as sequence diagrams or communication diagrams, illustrate how software objects collaborate or communicate with each other to perform a specific task or achieve a specific goal. They show the order in which the messages are exchanged between objects and the actions performed by each object. Therefore, they focus on object interactions.

Question 9

UML diagrams provide a visual representation of the software so that each use case/misuse case can be broken down and analyzed for common secure design patterns and resuable components.

Accepted Answer

UML diagrams are commonly used for software design and can be used to represent use cases and identify potential security issues. The diagrams provide a visual representation of the system, allowing for easier analysis and identification of reusable components and design patterns.

Question 10

Object Modeling does not allow one to visually create the UML models of the software components that are needed to satisfy the use case requirements.

Accepted Answer

Object Modeling is a technique used to visually create UML models of software components to satisfy use case requirements. Therefore, the statement is false.

Question 11

By following the standard modeling activities, the developers will have a complete end-to-end understanding of the design of the use case.

Accepted Answer

By following the standard modeling activities, the developers can create a clear and detailed understanding of the design of the use case from start to finish.

Question 12

A firewall is software that most often runs on dedicated hardware that acts as a filter between a private network and a public one.

Accepted Answer

A firewall can be both hardware and software-based, but it typically runs on dedicated hardware that acts as a filter between a private network and a public one.

Question 13

SSL can prevent phishing scams.

Accepted Answer

SSL (Secure Sockets Layer) certificates encrypt data and establish secure connections between web servers and user browsers. This prevents hackers from intercepting and stealing sensitive information, which can be used for phishing scams. Thus, SSL can help to prevent phishing scams.

Question 14

The firewall's responsibility is to make sure that no traffic gets through.

Accepted Answer

The firewall's responsibility is to monitor and filter traffic to prevent unauthorized access to a network or system. It allows legitimate traffic while blocking or restricting potentially harmful traffic.

Question 15

Securing input parameters is the first priority in any application.

Accepted Answer

Securing input parameters is essential in any application to prevent attacks such as SQL injection, cross-site scripting, and buffer overflow attacks.

Question 16

SSL will guarantee secure data.

Accepted Answer

SSL (Secure Sockets Layer) encrypts data transmitted over the internet, making it more secure, but it cannot guarantee complete security due to potential vulnerabilities in the system or implementation errors.

Question 17

Assigning the right properties to each class won't eliminate duplicate data in the design but just make each software component more modular.

Accepted Answer

The answer of Assigning the right properties to each class...

Question 18

Two-factor authentication makes it difficult for hackers to guess a person's password.

Accepted Answer

Two-factor authentication requires a second form of verification beyond just a password, such as a fingerprint or a code sent to a person's phone. This makes it much more difficult for hackers to gain access to an account even if they guess the password.

Question 19

Interaction diagrams are the least important artifacts in design.

Accepted Answer

Interaction diagrams are important artifacts in design as they show the flow of messages and interactions between objects. They help in understanding the system behavior and identifying potential issues in the design. Therefore, they are crucial for designing a well-functioning system.

Question 20

The perimeter defense method divided computers into two camps: "Us" and "them".

Accepted Answer

The perimeter defense method is a traditional approach to network security that divides the computer network into two camps, "inside" and "outside", or "us" and "them". The perimeter is then fortified with firewalls and other technologies to keep outsiders from accessing the internal network.

Quiz 7: Designing for Security