Certified Information Systems Security Professional CISSP · Free Practice Question Easy
Question 38
- A Coding standards
- B Secure coding guidelines
- C Software-defined security
- D Coding regulations
Reveal correct answer
Correct answer: A
Explanation
Correct Answer:
A is correct. Coding standards are the strongest form of secure coding practices. To be considered a standard, a practice must demonstrably reduce the risk of a particular type of vulnerability, be enforceable across the breadth of an organization’s software development efforts, and be verifiable in its implementation. Rigorous application of secure coding standards is the best way to reduce source code vulnerabilities.
Incorrect Answers:
B is incorrect. Secure coding guidelines are recommended practices that tend to be less specific than standards.
C is incorrect. Software-defined security (SDS or SDSec) is a security model in which security functions such as firewalling, intrusion detection and prevention systems (IDS/IPS), and network segmentation are implemented in software.
D is incorrect. This is not a valid term. The correct term is coding standards.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
