What are security controls ?

A. Controls that are intended to ensure that attacks are unsuccessful
B. Controls that are intended to detect and repel attacks
C. Controls that are intended to support recovery from problems
D. All of the mentioned

What is Life cycle risk assessment ?

A. Risk assessment before the system has been deployed
B. Risk assessment while the system is being developed
C. All of the mentioned
D. None of the mentioned

A system resource that has a value and has to be protected is known as ________________________?

A. Asset
B. Control
C. Vulnerability
D. None of the mentioned

Circumstances that have potential to cause loss or harm is known as___________________?

A. Attack
B. Threat
C. Vulnerability
D. Control

An impersonation of an authorised user is an example of a security threat ?

A. True
B. False
ExpLanation: it is a security attack.

Choose the fault class in which the following automated static analysis check would fall:”Pointer Arithmetic” ?

A. Storage management faults
B. Data faults
C. Input/output faults
D. Interface faults

Static analysis is now routinely used in the development of many safety and security critical systems?

A. True
B. False
ExpLanation: the static analyzer can discover areas of vulnerability such as buffer overflows or unchecked inputs

Choose the fault class in which the following automated static analysis check would fall: “Unreachable code”?

A. Control faults
B. Data faults
C. Input/output faults
D. Interface faults

Which level of Static Analysis allows specific rules that apply to a program to be checked ?

A. Characteristic error checking
B. User-defined error checking
C. Assertion checking
D. All of the mentioned

Choose the fault class in which the following automated static analysis check would fall:”Non-usage of the results of functions”?

A. Storage management faults
B. Data faults
C. Input/output faults
D. Interface faults