Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Softwares and Software Security

Which activity is characteristic of a secure SDLC, as distinct from an ordinary SDLC?

A secure SDLC integrates security into every phase, such as threat modelling during design and security testing before release. It does not defer security to after deployment or confine testing to functional features, since fixing flaws late is costlier and riskier.

  1. APerforming threat modelling during the design phase and security testing before releaseCorrect
  2. BStarting security checks only after the software has been deployed to users
  3. CSkipping documentation to shorten the development schedule
  4. DLimiting testing to functional checks of features requested by users

Explanation

A secure SDLC embeds security in every phase, for example threat modelling at design and code review and security testing before release. Checking security only after deployment or testing only functionality is the traditional weakness that a secure SDLC aims to remove.

Did you get it right without looking?

One question tells you little. A timed set on Softwares and Software Security shows your real accuracy, how long you take and where you lose marks.

Practise Softwares and Software SecurityFree diagnostic mock

More Softwares and Software Security questions