CISSP Security Software Development Certified Practice Exam

Sample Question

Q) ISO / IEC 27001: 2005 is the standard for:

a) Information Security Management System

b) Introduction and safety certification

c) The evaluation criteria for the validation of cryptographic algorithms

d) Certification of public key infrastructures

e) None

Q) What does "system integrity" means?

a) The software system was implemented as planned.

b) Users can not interfere in the process, they do not own.

c) Hardware and firmware undergo periodic tests to ensure that they are functioning properly.

d) Design specifications were checked for formal top level specification.

e) None

Q) Which of the following is a benefit of using high-level programming language?

a) This reduces the execution time of programs

b) This allows programmers to define the syntax

c) This requires management database programmer for storage management

d) This enforces coding standards

e) None

Q) In an online transaction processing (OLTP), which of the following actions to be taken when a malformed or incorrect operation?

a) These operations must be excluded from processing.

b) These operations must be handled after the program makes adjustments

c) These operations should be reflected in the report and review.

d) Transactions need to be fixed and processed.

e) None

Q) A "pseudo defect", which of the following? multiple-choice

a) The obvious loophole deliberately implanted into the software of the operating system as a trap for intruders.

b) The omission in the generation of the pseudo code.

c) Used to test for trespass in programming applications.

d) Typically generates an error page resulting in stopping the system.

e) None