CSLLP Secure Software Requirements

Question 1

What type of software requirement defines how the system should behave in terms of security, performance, or reliability?

Accepted Answer

Non-functional requirement

Answer

Non-functional requirements describe system qualities such as security, performance, and maintainability rather than specific behaviors or functions.

Question 2

Which process involves identifying and classifying data based on its sensitivity to determine appropriate security controls?

Accepted Answer

Data classification

Answer

Data classification assigns labels (such as public, internal, confidential, or top secret) to data based on sensitivity, guiding decisions about protection mechanisms.

Question 3

In abuse case modeling, what does an abuse case represent?

Accepted Answer

A scenario describing how an attacker might misuse the system

Answer

Abuse cases (also called misuse cases) describe how a malicious actor or a user with bad intent could abuse the system's functionality to cause harm.

Question 4

What is a security requirement that specifies users must be authenticated before accessing any resource?

Accepted Answer

Authentication requirement

Answer

An authentication requirement specifies how and when users must prove their identity before the system grants them access to resources.

Question 5

Which US law mandates security and privacy requirements for federal agency information systems?

Accepted Answer

FISMA

Answer

The Federal Information Security Modernization Act (FISMA) requires federal agencies to develop, document, and implement security programs for their information systems.

CSLLP - Certified Secure Software Lifecycle Professional Practice Test

CSLLP - Certified Secure Software Lifecycle Professional Practice Test

CSLLP Secure Software Requirements