Question 1

Which of the following federal agencies has the objective to develop and promote measurement, standards, and technology to enhance productivity, facilitate trade, and improve the quality of life?

Options :

A : National Security Agency (NSA)

B : National Institute of Standards and Technology (NIST)

C : United States Congress

D : Committee on National Security Systems (CNSS)

Answer: B

Question 2

The key to ensuring that every module in the system is operating correctly is what? (Choose all that apply.)

Options :

A : Ensuring proper interface design

B : Staying on top of changes

C : Designer creativity

D : Ensuring proper valid inputs

Answer: A,D

Question 3

What is qualitative risk analysis primarily based on?

Options :

A : Data from system logs

B : Threat analysis

C : Penetration tests

D : Expert judgment

Answer: D

Question 4

An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to?

Options :

A : Anonymous

B : Mutual

C : Multi-factor

D : Biometrics

Answer: C

Question 5

When considering software security requirements, which operations correctly categorize functional and non-functional requirements?

Options :

A : Functional: security, operational, continuity, deployment. Non-functional: business requirements, use cases, stories

B : Functional: security, operational, deployment. Non-functional: business requirements, uses case, stories.

C : Functional: business requirements, use cases, stories. Non-functional: security, operational, deployment.

D : Functional: business requirements, use cases, stories. Non-functional: security, operational, continuity, deployment.

Answer: D