SDL Security Testing & Code Analysis 4

Question 1

Which metric produced by static analysis tools indicates the proportion of code paths exercised during testing?

Accepted Answer

Code coverage

Answer

Code coverage measures the percentage of statements, branches, or paths executed by a test suite, helping identify untested and potentially vulnerable code.

Question 2

In SDL, 'red team' exercises are primarily intended to:

Accepted Answer

Simulate real adversary tactics to find exploitable weaknesses before attackers do

Answer

Red team exercises employ adversarial thinking and techniques to identify vulnerabilities and attack chains that traditional testing may miss.

Question 3

Which of the following is a key advantage of integrating SAST tools into a CI/CD pipeline?

Accepted Answer

Provides immediate feedback to developers on security issues as code is committed

Answer

Integrating SAST into CI/CD enables shift-left security by alerting developers to potential vulnerabilities at commit time, reducing the cost and effort of remediation.

Question 4

What is 'symbolic execution' in the context of security code analysis?

Accepted Answer

Analyzing a program by representing inputs as symbolic variables to explore all possible execution paths

Answer

Symbolic execution treats program inputs as symbolic values and explores multiple execution paths simultaneously to find inputs that trigger security-sensitive conditions.

Question 5

An SDL team discovers a use-after-free bug during fuzzing. Which mitigation technique is most directly applicable at the compiler/runtime level?

Accepted Answer

Memory-safe language or AddressSanitizer

Answer

AddressSanitizer (ASan) detects use-after-free and other memory errors at runtime, and rewriting in a memory-safe language eliminates the class entirely.

(SDL) Security Development Lifecycle Certification Practice Test

(SDL) Security Development Lifecycle Certification Practice Test

SDL Security Testing & Code Analysis 4