CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ89

Secure Software Lifecycle Management

The secure-coding build environment includes tools that actively support secure specification, design, and implementation. Which of the following features do these tools have? Each correct answer represents a complete solution. Choose all that apply.

Choose four
  • A They decrease the exploitable flaws and weaknesses.
  • B They reduce and restrain the propagation, extent, and damage that have occurred by insecure software behavior.
  • C They decrease the attack surface.
  • D They employ software security constraints, protections, and services. E. They decrease the level of type checking and program analysis.
Explanation

Secure software-development practices reduce vulnerabilities and mitigate the potential impact of exploitation. Secure design also reduces the attack surface, while compiler, analysis, and security-control features help enforce protections and constraints. Reducing type checking or program analysis would remove safeguards rather than improve software security.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!