QUESTION: 105

Stella works as a system engineer for BlueWell Inc. She wants to identify the performance thresholds of each build. Which of the following tests will help Stella to achieve her task?

Reliability test
Performance test
Regression test
Functional test

Answer(s): B

Explanation:

The various types of internal tests performed on builds are as follows: Regression tests: It is also known as the verification testing. These tests are developed to confirm that capabilities in earlier builds continue to work correctly in the subsequent builds. Functional test: These tests emphasizes on verifying that the build meets its functional and data requirements and correctly generates each expected display and report. Performance tests: These tests are used to identify the performance thresholds of each build. Reliability tests: These tests are used to identify the reliability thresholds of each build.

Reveal Solution Next Question

QUESTION: 106

Continuous Monitoring is the fourth phase of the security certification and accreditation process. What activities are performed in the Continuous Monitoring process? Each correct answer represents a complete solution. Choose all that apply.

Security accreditation decision
Security control monitoring and impact analyses of changes to the information system
Security accreditation documentation
Configuration management and control
Status reporting and documentation

Answer(s): B,D,E

Explanation:

Continuous Monitoring is the fourth phase of the security certification and accreditation process. The Continuous Monitoring process consists of the following three main activities: Configuration management and control Security control monitoring and impact analyses of changes to the information system Status reporting and documentation The objective of these tasks is to observe and evaluate the information system security controls during the system life cycle. These tasks determine whether the changes that have occurred will negatively impact the system security.
Answer(s): A and C are incorrect. Security accreditation decision and security accreditation documentation are the two tasks of the security accreditation phase.

Reveal Solution Next Question

QUESTION: 107

Which of the following terms ensures that no intentional or unintentional unauthorized modification is made to data?

Non-repudiation
Integrity
Authentication
Confidentiality

Answer(s): B

Explanation:

Integrity ensures that no intentional or unintentional unauthorized modification is made to data. Answer D is incorrect. Confidentiality refers to the protection of data against unauthorized access. Administrators can provide confidentiality by encrypting data. Answer A is incorrect. Non-repudiation is a mechanism to prove that the sender really sent this message. Answer C is incorrect. Authentication is the process of verifying the identity of a person or network host.

Reveal Solution Next Question

QUESTION: 108

Which of the following provides an easy way to programmers for writing lower-risk applications and retrofitting security into an existing application?

Watermarking
ESAPI
Encryption wrapper
Code obfuscation

Answer(s): B

Explanation:

ESAPI (Enterprise Security API) is a group of classes that encapsulate the key security operations, needed by most of the applications. It is a free, open source, Web application security control library. ESAPI provides an easy way to programmers for writing lower-risk applications and retrofitting security into an existing application. It offers a solid foundation for new development. Answer A is incorrect. Watermarking is the process of embedding information into software in a way that is difficult to remove. Answer C is incorrect. Encryption wrapper dynamically encrypts and decrypts all the software code at runtime. Answer D is incorrect. Code obfuscation is designed to protect code from decompilation.

Reveal Solution Next Question

Free CSSLP Exam Braindumps (page: 26)

QUESTION: 105

Explanation:

QUESTION: 106

Explanation:

QUESTION: 107

Explanation:

QUESTION: 108

Explanation: