3.6 Summarize secure application development and deployment concepts.

Question 1

Change management =

Answer 1

documentation

Question 2

Advanced Persistent Threats (APTs)

Answer 2

Any sophisticated series of related attacks taking place over an extended period of time.

Question 3

Agile development

Answer 3

A method of software development meant to be rapid.

Question 4

Baselining

Answer 4

Creating a fundamental, or baseline, security level.

Question 5

Agile is ______ oriented

Answer 5

Agile is Customer Service oriented

Question 6

Immutable Systems

Answer 6

Nothing can be added to or changed on the system.

Question 7

Stored Procedures

Answer 7

Once you have a secure database configuration, the next issue is how SQL queries are executed. This is normally accomplished with stored procedures

Question 8

Code Signing

Answer 8

By digitally signing code, such as ActiveX components in web pages or device drivers, the end user who is installing the software can be confident as to the software’s origin.

Question 9

confidentiality is ensured through _____-

Answer 9

encryption

Question 10

______ means to hide.

Answer 10

Obfuscation

Question 11

Stress Testing

Answer 11

This involves subjecting the target system to a workload far in excess of what it would normally encounter.

Question 12

Which SDCL model is based around adaptive development where focusing on a working product and fulfilling customer needs is prioritized over rigid adherence to a process, use of specific tools, and details documentation?

A. Waterfall
B. Agile
C. Spiral
D. DevOps

Answer 12

B. Agile

Question 13

When an organization wishes to automate many elements and functions of IT management, such as development, operations, security, and quality assurance, they are likely to be implementing which of the following?
A. SCADA
B. Code Signing
C. Version control.
D. DevOps.

Answer 13

D. DevOps

Question 14

You are working for a business and they want to know if a newly deployed application server will handle the expected load. How can you test the application server?

A. Perform a static code review
B. Deploy the server in a sandbox and observer it.
C. Use a fuzzer on the server
D. Perform a stress test

Answer 14

D. Perform a stress test