Choose the correct answer:

A) What is software assurance?

1. a methodology that provides the framework for secure software
2. a tool that can be used to produce secure software
3. a theorem prover technique to produce secure software
4. a CMMI process to produce reliable software

B) Validation is the process to ensure that:

1. the requirements meet the needs.
2. the design meets the requirements.
3. the implementation meets the requirements.
4. the implementation faithfully satisfies the design.

C) Verification is the process to ensure that:

1. the requirements meet the needs.
2. the design meets the requirements.
3. the implemented system meets the requirements.

D) To counter or fix a vulnerability/flaw in an application, which of the following is (are)important to understand (Choose all that apply.)"

1. location of the vulnerability
2. the programmer who introduced the vulnerability
3. the organization that introduced the vulnerability
4. the time the vulnerability was introduced

E) What is the best way a developer can sustain secure code during software maintenance?

1. Build a Change Control Board and conduct threat analysis on each change request.
2. Go to training for advanced hacking techniques and read journals on security topics.
3. Work closely with the business analysts with each requirement and continue with the peer reviews.
4. Read journals and web sites that repot on latest attacks.

F) Having a software assurance plan ensures which of the following?

1. secure code
2. that a process is in place within the development life cycle that tests for security vulnerabilities
3. that the software is safe from attacks
4. that the development has tested for security vulnerabilities before releasing the software product