nerdexam
(ISC)2

CSSLP · Question #149

The build environment of secure coding consists of some tools that actively support secure specification, design, and implementation. Which of the following features do these tools have? Each…

The correct answer is A. They decrease the exploitable flaws and weaknesses. B. They reduce and restrain the propagation, extent, and damage that have occurred by insecure C. They decrease the attack surface. D. They employ software security constraints, protections, and services. Secure coding tools in a build environment enhance software security by reducing exploitable flaws, limiting damage from insecure code, decreasing the attack surface, and enforcing security constraints and protections.

Secure Software Implementation

Question

The build environment of secure coding consists of some tools that actively support secure specification, design, and implementation. Which of the following features do these tools have? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AThey decrease the exploitable flaws and weaknesses.
  • BThey reduce and restrain the propagation, extent, and damage that have occurred by insecure
  • CThey decrease the attack surface.
  • DThey employ software security constraints, protections, and services.
  • EThey decrease the level of type checking and program analysis.

How the community answered

(16 responses)
  • A
    94% (15)
  • E
    6% (1)

Why each option

Secure coding tools in a build environment enhance software security by reducing exploitable flaws, limiting damage from insecure code, decreasing the attack surface, and enforcing security constraints and protections.

AThey decrease the exploitable flaws and weaknesses.Correct

Secure coding tools, through static and dynamic analysis, help identify and remediate vulnerabilities early, thereby directly decreasing the number of exploitable flaws and weaknesses in the software.

BThey reduce and restrain the propagation, extent, and damage that have occurred by insecureCorrect

By enforcing secure coding practices and identifying vulnerabilities, these tools help design software that is more resilient to attacks, reducing the propagation and extent of damage should an insecurity be exploited.

CThey decrease the attack surface.Correct

These tools guide developers to minimize unnecessary features, open ports, and complex configurations, which collectively decrease the potential attack surface available to adversaries.

DThey employ software security constraints, protections, and services.Correct

Secure coding tools often integrate with security libraries, frameworks, and policies to ensure that software components adhere to defined security constraints, utilize built-in protections, and leverage security services effectively.

EThey decrease the level of type checking and program analysis.

Secure coding tools typically increase the level of type checking and program analysis, as these are fundamental techniques for identifying potential bugs and security vulnerabilities.

Concept tested: Secure coding tool features

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-218.pdf

Topics

#Secure coding tools#Build environment security#Software vulnerability reduction#Attack surface reduction

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CSSLP Practice