EC-CouncilCertified Application Security Engineer (.NET)
Domain 1Objective 4
Software Security Standards, Models, and Frameworks CASENET Practice Questions (Page 3)
Part of the Application Security Foundations domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 68 practice questions to prepare you well beyond it. (estimate)
68questions here
14free pages
22concepts
Questions 11–15
- 11
Which of the following is listed in the OWASP Top 10 as a web application security risk?
Select an answer first - 12
A bank's application enforces a rule that a single user cannot both create and approve a financial transaction. This is an example of which security model's principle?
Select an answer first - 13
A government agency requires that a software product be evaluated against a set of security functional and assurance requirements. They want to use an internationally recognized standard for this evaluation. Which standard should they reference?
Select an answer first - 14
What is the primary focus of the ISO/IEC 27034 standard?
Select an answer first - 15
In the Microsoft SDL, which phase involves creating security requirements and performing threat modeling?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.