EC-CouncilCertified Application Security Engineer (.NET)
Domain 1Objective 4
Software Security Standards, Models, and Frameworks CASENET Practice Questions (Page 9)
Part of the Application Security Foundations domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 68 practice questions to prepare you well beyond it. (estimate)
68questions here
14free pages
22concepts
Questions 41–45
- 41
Which of the following is a domain in the BSIMM framework?
Select an answer first - 42
What is the main purpose of the OWASP SAMM framework?
Select an answer first - 43
A company that processes credit card payments is developing a new e-commerce .NET application. They must comply with PCI DSS and also want to reduce the risk of common web vulnerabilities. They have a limited budget and need to prioritize security activities. Which approach best balances compliance and security?
Select an answer first - 44
A data processing system must ensure that data integrity is maintained by preventing subjects from reading objects at a lower integrity level and writing to objects at a higher integrity level. Which security model should be implemented?
Select an answer first - 45
A development team is adopting the Microsoft SDL for a new .NET application. They are currently in the 'Implementation' phase. Which security activity is most appropriate for this phase?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASENET” is a trademark of its owner, used for identification only.