- | Page
D487 EXAM QUESTIONS WITH
ANSWERS
Question : What are the two common best principles of
software applications in the development process?Choose 2 answers.Quality codeSecure codeInformation securityIntegrityAvailability CORRECT ANSWER: : Quality codeSecure code"Quality code" is correct. Quality code is efficient code that is easy to maintain and reusable."Secure code" is correct. Secure code authorizes and authenticates every user transaction, logs the transaction, and denies all unauthorized requisitions.
Question : What ensures that the user has the appropriate
role and privilege to view data?AuthenticationMulti- factor authenticationEncryptionInformation securityAuthorization CORRECT ANSWER: : AuthorizationAuthorization ensures a user's information and credentials are approved by the system.
- | Page
Question : Which security goal is defined by "guarding
against improper information modification or destruction and ensuring information non-repudiation and authenticity"?IntegrityQualityAvailabilityReliability CORRECT ANSWER: : IntegrityThe data must remain unchanged by unauthorized users and remain reliable from the data entry point to the database and back.
Question : Which phase in an SDLC helps to define the
problem and scope of any existing systems and determine the objectives of new systems?RequirementsDesignPlanningTesting CORRECT ANSWER: : PlanningThe planning stage sets the project schedule and looks at the big picture.
Question : What happens during a dynamic code
review?Programmers monitor system memory, functional behavior, response times, and overall performance.Customers perform tests to check software meets requirements.An analysis of computer programs without executing them is performed.Input fields are supplied with unexpected input and tested.
- | Page
CORRECT ANSWER: : Programmers monitor system memory, functional behavior, response times, and overall performance.
Question : How should you store your application user
credentials in your application database?Use application logic to encrypt credentialsStore credentials as clear textStore credentials using Base 64 encodedStore credentials using salted hashes CORRECT ANSWER: : Store credentials using salted hashesHashing is a one-way process that converts a password to ciphertext using hash algorithms. Password salting adds random characters before or after a password prior to hashing to obfuscate the actual password.
Question : Which software methodology resembles an
assembly-line approach?V-modelAgile modelIterative modelWaterfall model CORRECT ANSWER: : Waterfall modelWaterfall model is a continuous software development model in which the development steps flow steadily downwards.
- | Page
Question : Which software methodology approach
provides faster time to market and higher business value?Iterative modelWaterfall modelV-modelAgile model CORRECT ANSWER: : Agile modelIn the agile model, projects are divided into small incremental builds that provide working software at the end of each iteration and adds value to business.
Question : In Scrum methodology, who is responsible for
making decisions on the requirements?Scrum TeamProduct OwnerScrumMasterTechnical Lead CORRECT ANSWER: : Product OwnerThe Product Owner is responsible for requirements/backlog items and prioritizing them.
Question : What is the reason software security teams
host discovery meetings with stakeholders early in the development life cycle?To determine how much budget is available for new security toolsTo meet the development teamTo refactor functional requirements to ensure