Apply the Secure Software Development Life Cycle (SDLC) CCSP Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   Which organization publishes the SAFECode secure coding guidelines?

   • AISO
   • BSAFECode
   • CNIST
   • DOWASP
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is a primary purpose of software configuration management?

   • ATo track and control changes to software code
   • BTo design the user interface
   • CTo conduct penetration testing
   • DTo optimize database query performance
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A development team is using SAFECode guidelines to improve the security of their cloud application. They want to ensure that error handling does not reveal sensitive information to users. Which practice aligns with SAFECode guidelines?

   • ADisplay generic error messages to users and log detailed errors internally
   • BDisplay the full stack trace to users for transparency
   • CLog all errors to the browser console
   • DDisable all error reporting to users
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A development team is using a configuration management tool to manage infrastructure as code (IaC) for their cloud environment. They want to ensure that changes to the IaC are reviewed and approved before being applied. Which practice best supports this requirement?

   • AUse a change management system that logs all changes after they are applied
   • BUse a configuration management database (CMDB) to track infrastructure changes
   • CUse a version control system with pull request reviews for IaC changes
   • DUse a configuration management tool that automatically applies changes
   Reveal Solution Discussion Select an answer first