EC-CouncilCertified Application Security Engineer (.NET)
Domain 1Objective 4
Software Security Standards, Models, and Frameworks CASENET Practice Questions (Page 10)
Part of the Application Security Foundations domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 68 practice questions to prepare you well beyond it. (estimate)
68questions here
14free pages
22concepts
Questions 46–50
- 46
A software company wants to adopt a secure development framework that includes specific security activities in each phase of the SDLC, such as threat modeling in the design phase and security testing in the verification phase. They also want a framework that is widely recognized and has been adopted by many large organizations. Which framework best fits these criteria?
Select an answer first - 47
What is the primary purpose of the OWASP Top 10 list?
Select an answer first - 48
A military system uses a security model that prevents users from reading documents at a higher classification level and also prevents them from writing to documents at a lower classification level. Which security model is being enforced?
Select an answer first - 49
What is the primary goal of secure development frameworks like Microsoft SDL and Cisco SDL?
Select an answer first - 50
Which of the following is a business function in the OWASP SAMM framework?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.