SDL Secure Software Development Practices 5

Question 1

Which SDL practice requires developers to identify the minimum set of user accounts, protocols, and features needed and disable everything else?

Accepted Answer

Attack surface reduction

Answer

Attack surface reduction removes or disables unnecessary features, accounts, and protocols so attackers have fewer vectors to target.

Question 2

In SDL, what is the purpose of 'security training' for developers?

Accepted Answer

Ensuring developers understand secure coding techniques and can apply SDL requirements in their daily work

Answer

SDL security training ensures developers have foundational knowledge of common vulnerabilities, secure coding patterns, and SDL processes before they begin development.

Question 3

What risk does 'repudiation' represent in the STRIDE threat model?

Accepted Answer

A user or attacker denying they performed an action due to insufficient audit logging

Answer

Repudiation threats occur when a system lacks sufficient logging or audit trails, allowing malicious actors to deny performing harmful actions.

Question 4

When performing SDL threat modeling, what is a 'trust boundary'?

Accepted Answer

A point in the system where data or control passes between components with different privilege levels or trust levels

Answer

Trust boundaries mark where data transitions between components with differing trust levels, and SDL requires validating all data that crosses these boundaries.

Question 5

Which SDL requirement ensures that in the event of an error or attack, a system denies access rather than inadvertently granting it?

Accepted Answer

Fail-safe defaults

Answer

Fail-safe defaults ensure that any system failure or unexpected condition results in a denial of access rather than an accidental grant of permissions.

(SDL) Security Development Lifecycle Certification Practice Test

(SDL) Security Development Lifecycle Certification Practice Test

SDL Secure Software Development Practices 5