D487: Secure Software Design Questions Study Guide Questions And Correct Answers

How can you establish your own SDL to build security into a process appropriate for your organization's needs based on the given environments? -Continuous integration and continuous deployment -API invocation processes -Iterative development -Enables and improves business activities Question 7a: Agile Question 7b: DevOps Question 7c: Cloud Question 7d: Digital enterprise {Ans: Iterative development This method uses requirements and solutions evolving through collaboration. Continuous integration and continuous deployment This method involves teams working together as partners as they learn how their product operates in the real world. API invocation processes This method uses new ways of data to rethink how applications are built, deployed, and used. Enables and improves business activities This method involves digitizing systems rapidly and dramatically.}What is a threat action that is designed to illegally access and use another person's credentials? Tampering Spoofing Elevation of privilege Information disclosure {Ans: Spoofing Spoofing is a threat action that occurs when the cyber criminal acts as a trusted device to get you to relay secure information.}Which practice in the Ship (A5) phase of the security development cycle uses tools to identify weaknesses in the product? Final privacy review Vulnerability scan Remediation report Customer engagement framework {Ans: Vulnerability