8.3 - Assess the Effectiveness of Software Security CISSP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the main objective of audit trail analysis?

   • ATo automatically patch vulnerabilities found in the application code
   • BTo identify security incidents, anomalies, and patterns of misuse
   • CTo generate regular reports for system performance tuning
   • DTo compress log files to save storage space
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a key input to a software security risk assessment?

   • AA list of known vulnerabilities in the software and its dependencies
   • BThe color scheme of the user interface
   • CThe number of developers on the team
   • DThe marketing plan for the software product
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security administrator is configuring audit logging for a new application. The administrator wants to ensure that the logs can be used to reconstruct the sequence of events during a security incident. Which of the following is the MOST important attribute for the audit logs to have?

   • AThey are encrypted at rest.
   • BThey are stored in a centralized location.
   • CThey include a reliable timestamp for each event.
   • DThey are backed up daily.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of a risk mitigation strategy in software security?

   • AIgnoring the risk and hoping it will not be exploited
   • BIncreasing the number of features in the software
   • CApplying security patches to the software and its dependencies
   • DDeleting all audit logs to save storage space
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst is reviewing audit logs from a web application and notices a series of failed login attempts for a single user account, each occurring at 3-second intervals from the same source IP, followed by a successful login. The analyst then sees the same pattern repeated for three other accounts over the next hour. Which conclusion is best supported by this audit trail analysis?

   • AA user has forgotten their password and is retrying.
   • BA brute-force attack is in progress against multiple accounts.
   • CA distributed denial-of-service attack is targeting the authentication service.
   • DThe audit log has been tampered with to hide a previous breach.
   Reveal Solution Discussion Select an answer first