8-60.1 Software Security Assessment

Question 1

Objective of this assessment is to identify known weaknesses and exposures

Answer 1

Vulnerability Assessment

Question 2

This type of assessment checks against guidance, best practices, and applicable standards

Answer 2

Configuration Assessment

Question 3

The term used to describe the level of risk after controls have been applied

Answer 3

Residual Risk

Question 4

An independent review of application functionality and effectiveness

Answer 4

Application Audit

Question 5

The type of attack exploits a software vulnerability to obtain higher level priviliges

Answer 5

Privilege escalation