Secure Application Development, Deployment and Automation Concep

To develop secure software that prevents attackers from directly injecting attacks into computer memory and manipulating the application’s process, one should employ which method?

• Elasticity

• Dead code

• Normalization

• Software diversity

Problems in which phase will specifically stop continuous deployment but not necessarily continuous delivery?

• Continuous integration

• Continuous monitoring

• Continuous validation

• Continuous development

Why is memory management important in software development?

• A program can grow and consume other program spaces

• Memory is expensive.

• Memory can be a speed issue.

• None of the above.

When a program is installed and needs permissions, what is this called?

• Staging

• Provisioning

• Continuous integration

• Version control

Which of the following statements concerning elasticity and scalability are true?

• Scalability requires elasticity.

• Elasticity involves enabling software to use more processors to do more work.

• Elasticity means being prepared to take advantage of scalability.

• All of the above.

To protect software from reverse engineering by attackers, developers can use which of the following?

• Dead code

• Obfuscation

• Binary diversity

• Stored procedures

To manage various releases of software over time, the organization uses which of the following?

• Staging environment

• Provisioning and deprovisioning steps

• Version control

• Continuous integration

Which of the following environments is used to test compatibility against multiple target environments?

• Production

• Test

• Quality assurance

• Staging

The fact that there are multiple methods of representing an object in a computer system can lead to issues when logical comparisons are needed. What can be used to ensure accuracy of comparison elements?

• Normalization

• Stored procedures

• Third-party libraries

• Third-party software development kits

What is the only sure method of ensuring input is valid before use on a server?

• Use of third-party libraries and software development kits

• Server-side validation

• Stored procedures

• Client-side validation