EC-CouncilCertified Application Security Engineer (.NET)
Domain 1Objective 4
Software Security Standards, Models, and Frameworks CASENET Practice Questions (Page 2)
Part of the Application Security Foundations domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 68 practice questions to prepare you well beyond it. (estimate)
68questions here
14free pages
22concepts
Questions 6–10
- 6
Which Microsoft SDL phase includes activities like code review and security testing?
Select an answer first - 7
Which of the following is an example of a CVE identifier?
Select an answer first - 8
A government contractor is required to follow a set of secure development practices that are widely recognized and can be tailored to their existing processes. They need a framework that defines specific practices and tasks for secure software development, including security requirements, secure design, and secure coding. Which framework should they reference?
Select an answer first - 9
An organization wants to establish an information security management system (ISMS) and also implement a set of best-practice controls for their application development processes. Which combination of standards should they use?
Select an answer first - 10
A government agency is implementing a system where users can read documents at their own classification level or below, but they can only write to documents at their own level or above. This is to prevent the leakage of classified information. Which model and its properties are being applied?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.