Absolute Free Secure-Software-Design Exam Practice for Comprehensive Preparation 

The security team is reviewing all noncommercial software libraries used in the new product to ensure they are being used according to the legal specifications defined by the authors. What activity of the Ship SDL phase is being performed? 

Which secure coding best practice says to use a single application-level authorization component that will lock down the application if it cannot access its configuration information? 

Which secure coding best practice says to only use tested and approved components and use task-specific, built-in APIs to conduct operating system functions? 

Automated security testing was performed by attempting to log in to the new product with a known username using a collection of passwords. Access was granted after a few hundred attempts. How should existing security controls be adjusted to prevent this in the future?

Which security assessment deliverable identities unmanaged code that must be kept up to date throughout the life of the product?