CSLLP Secure Software Requirements

Question 1

What type of software requirement defines how the system should behave in terms of security, performance, or reliability?

Accepted Answer

Non-functional requirement

Answer

Functional requirement

Answer

Business requirement

Answer

User story

Question 2

Which process involves identifying and classifying data based on its sensitivity to determine appropriate security controls?

Accepted Answer

Data classification

Answer

Data normalization

Answer

Data aggregation

Answer

Data masking

Question 3

In abuse case modeling, what does an abuse case represent?

Accepted Answer

A scenario describing how an attacker might misuse the system

Answer

A use case that has not been tested

Answer

A poorly written user story

Answer

A deprecated software feature

Question 4

What is a security requirement that specifies users must be authenticated before accessing any resource?

Accepted Answer

Authentication requirement

Answer

Authorization requirement

Answer

Audit requirement

Answer

Availability requirement

Question 5

Which US law mandates security and privacy requirements for federal agency information systems?

Accepted Answer

FISMA

Answer

HIPAA

Answer

PCI DSS

Answer

GLBA

Question 6

Which standard provides a framework for software assurance maturity, helping organizations improve their secure software development practices?

Accepted Answer

OWASP SAMM

Answer

ISO 27001

Answer

NIST CSF

Answer

CIS Benchmarks