Questions for Domain 8: Software Development Security

  1. What describes a more agile development and support model, where developers directly support operations?
     
    (a) DevOps
    (b) Sashimi
    (c) Spiral
    (d) Waterfall
     
  2. Two objects with the same name have different data. What OOP concept does this illustrate?
     
    (a) Delegation
    (b) Inheritance
    (c) Polyinstantiation
    (d) Polymorphism
     
  3. What type of testing determines whether software meets various end-state requirements from a user or customer, contract, or compliance perspective?
     
    (a) Acceptance testing
    (b) Integration testing
    (c) Regression testing
    (d) Unit testing
     
  4. A database contains an entry with an empty primary key. What database concept has been violated?
     
    (a) Entity integrity
    (b) Normalisation
    (c) Referential integrity
    (d) Semantic integrity
     
  5. Which vulnerability allows a third party to redirect static content within the security context of a trusted site?
     
    (a) Cross-site request forgery (CSRF)
    (b) Cross-site scripting (XSS)
    (c) PHP remote file inclusion (RFI)
    (d) SQL injection

Answers in comments

One thought on “Questions for Domain 8: Software Development Security

  1. Q1: (a) DevOps

    Q2: (c) Polyinstantiation (meaning “many instances”, such as two objects that have the same name but different data – polymorphism is instead the ability to overload operators, performing different methods depending on the context of the input message)

    Q3: (a) Acceptance testing

    Q4: (a) Entity integrity (meaning that each tuple has a unique primary key that is not null)

    Q5: (a) CSRF

    Like

Leave a reply to Chris Cancel reply

Design a site like this with WordPress.com
Get started