Home > CISSP > Quizzes > CISSP Secure Software Development
CISSP Secure Software Development
Fast practice, instant feedback. Timer auto-submits when time’s up.
Avg score: 79% • Most missed: “The most effective defense against a buffer overflow attack.”
CISSP Secure Software Development
Time left 00:00
25 Questions

1. Allows user to bypass failed security controls

2. A template that defines the methods and variables to be included in a particular type of object

3. Attributes identifying a record

4. Unique identifier

5. Memory management involves allocating memory to a process; reallocating it upon process completion; then re-allocating to a new process- can result in residual information

6. An application that consists of components on separate and networked systems.

7. The process of developing highest-detail designs

8. Combines data from multiple databases;data is extracted and transferred to central store;OLAP

9. Structured Query Language

10. Database in one table

11. source/destination IP and Port set to same

12. Requirements built on what is available; built on assumptions on how system might work; consists of planning and trying different designs before development -not cost effective- results in less than optimal systems

13. Data is arranged in a tree structure with parent records at the top of the database and a hierarchy of child records in successive layers

14. occurs when all the components of the entire system have been assembled and the entire system is tested from end to end.

15. The formal business process that ensures all changes made to a system receive formal review and approval from all stakeholders before implementation.

16. A software development methodology that focuses on Defect prevention rather than defect removal. The goal is to write the code correctly the first time!

17. should be required procedures for changing; accepting; and testing software-management approval-change management; config management

18. checks Semantic-structural enforcement;referential; cascading update/delete;entity tables must have Primary Key; Primary columns must be unique and not null

19. The best defense against a session hijacking and MITM attacks which should be incorporated in the development of software? Use randomized and unique ids to id sessions between two communicating targets.

20. Channel allowing two cooperating processes to transfer info in a way it violated sec policy; either storage; one process writes; another process reads or timing one process relays info to another by modulating its use of sys resources

21. The process of detecting certain anomalous behavior to prevent viruses

22. Each process has its own memory space

23. reconfigures a system to use the IP of a trusted system-correct with packet filtering techniques

24. A malicious program that spreads by attacking known weaknesses on computer systems.

25. Assembly to machine

⚡ Recently practiced quizzes in this topic
Live quiz activity
CISSP Domain 8: Software Development Security CISSP Crypto Domain CISSP Physical Security CISSP Domain 1: Security and Risk Management CISSP Domain 3: Security Architecture and Engineering CISSP Domain 6: Security Assessment and Testing CISSP Domain 5: Identity and Access Management CISSP Domain 4: Communication and Network Security CSSLP: Certified Secure Software Lifecycle Professional CISSP Practice Exam 1
 
❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

🌈  Our mission is to help improve your scores in any subject and exam withonline quizzes, practice tests, study guides, & advice for students. Since 2018.
About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |
Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.