D487 Secure Sw Design Study Guide Graded A+

In what phase of the SDL is threat modeling conducted? {Ans: A2 Architecture Phase}What is the product risk profile? {Ans: A security assessment deliverable that estimates the actual cost of the product.}What is the first phase in the security development life cycle? {Ans: A1 Security Assessment}What is a weakness that can be exploited? {Ans: vulnerability}Who responds to software product security incidents that involve the external discovery of post-release software vulnerabilities? {Ans: Post-Release PSIRT Response}Which post-release support key success factor says that any change or component reuse should trigger security development life cycle activities? {Ans: SDL cycle for any architectural changes or code reuses}