Which of the following are the important areas addressed by a software system's security policy? Each correct answer represents a complete solution. Choose all that apply.

• A.Identification and authentication
• B.Punctuality
• C.Data protection
• D.Accountability
• E.Scalability
• F.Access control

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an attack with IP fragments that cannot be reassembled?

• A.Password guessing attack
• B.Teardrop attack
• C.Dictionary attack
• D.Smurf attack

Comment: *

Name: *

Email: *

Verification: *

In which of the following processes are experienced personnel and software tools used to investigate, resolve, and handle process deviation, malformed data, infrastructure, or connectivity issues?

• A.Risk Management
• B.Exception management
• C.Configuration Management
• D.Change Management
• E.Explanation:
  Exception management is a process in which experienced personnel and software tools are used to investigate, resolve, and handle process deviation, malformed data, infrastructure or connectivity issues. It increases the efficiency of business processes and contributes in the progress of business.

Comment: *

Name: *

Email: *

Verification: *

Software Development Life Cycle (SDLC) is a logical process used by programmers to develop software.
Which of the following SDLC phases meets the audit objectives defined below: System and data are validated. System meets all user requirements. System meets all control requirements.

• A.Evaluation and acceptance
• B.Programming and training
• C.Definition
• D.Initiation

Comment: *

Name: *

Email: *

Verification: *

Which of the following software review processes increases the software security by removing the common vulnerabilities, such as format string exploits, race conditions, memory leaks, and buffer overflows?

• A.Management review
• B.Code review
• C.Peer review
• D.Software audit review

Comment: *

Name: *

Email: *

Verification: *