首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
计算机
The following scenario will be used for questions 26, 27, and 28. Trent is the new manager of his company’s internal software de
The following scenario will be used for questions 26, 27, and 28. Trent is the new manager of his company’s internal software de
admin
2013-12-19
87
问题
The following scenario will be used for questions 26, 27, and 28.
Trent is the new manager of his company’s internal software development department. He has been told by his management that the group needs to be compliant with the international standard that provides guidance to organizations in integrating security into the processes used for managing their applications. His new boss told him that he should join and get familiar with the Web Application Security Consortium, and Trent just received an e-mail stating that one of the company’s currently deployed applications has a zero day vulnerability.
Which of the following best describes the consortium Trent’s boss wants him to join?
选项
A、Nonprofit organization that produces open-source software and follows widely agreed upon best-practice security standards for the World Wide Web.
B、U.S. DHS group that provides best practices, tools, guidelines, rules, principles, and other resources for software developers, architects, and security practitioners to use.
C、Group of experts who create proprietary software tools used to help improve the security of software worldwide.
D、Group of experts and organizations who certify products based on an agreed-upon security criteria.
答案
A
解析
A正确。Web应用安全联盟(Web Application Security Consortium,WASC)是一个非盈利组织,它是由一群国际专家、行业从业者和组织的代表(他们为万维网制定了开源且被广泛同意的最佳实践安全标准)组成的。
B不正确。因为美国的国土安全部(Department of Homeland Security,DHS)提供了最佳实践、工具、指南、规则、原理和其他资源,可供软件开发人员、架构师和安全从业者在其开发的每个阶段将安全嵌入软件中。这个DHS首创了被称为开发必需的组成部分(BSI)的概念,它是不同行业的许多实体参与并提供有用材料的共同努力。
C不正确。因为这是一个干扰项。不存在某个官方组织为所列的目的提供合适的工具。
D不正确。因为Web应用安全联盟并不认证产品。相反,它为如何将安全性整合到软件提供指导方针和开源的最佳实践。
转载请注明原文地址:https://kaotiyun.com/show/qNhZ777K
0
CISSP认证
相关试题推荐
Salt,shellsormetalsarestillusedasmoneyinout-the-waypartsoftheworldtoday.Saltmayseemratherastrange【C1】__
AsformercolonistsofGreatBritain,theFoundingFathersoftheUnitedStatesadoptedmuchofthelegalsystemofGreatBritai
AsformercolonistsofGreatBritain,theFoundingFathersoftheUnitedStatesadoptedmuchofthelegalsystemofGreatBritai
Severaltypesoffinancialriskareencounteredininternationalmarketing;themajorproblemsincludecommercial,political,an
[A]Marketforglasscraftsisgrowing[B]Dependenceofcomputerdevelopmentonglass[C]Behindtheadaptabilityofglass[D]
Youaresupposedtowritealettertoyouruniversitycanteen,suggestinghowtoimproveitsservice.Youshouldwriteneatly
Writeanessayof160-200wordsbasedonthefollowingdrawing.Inyouressay,youshould1)describethedrawingbriefly,
Youarethepresidentofacompany.WriteamemotoSallyCooper,theHRmanagerontheemployeestrainingoncomputerto,1
Americanfarmershavebeencomplainingoflaborshortagesforseveralyearsnow.Givenamulti-yeardeclineinillegalimmigrati
Familiarasitmayseem,gravityremainsamysterytomodernphysics.Despiteseveraldecadesoftrying,scientistshavefailed
随机试题
“为储户保密”原则的含义是()
以下哪个症状不属温病的中焦病证
A.血府逐瘀汤B.柴胡疏肝散C.少腹逐瘀汤D.旋覆花汤E.失笑散合丹参饮腹痛瘀血内停的主方是
在合作企业中,合作各方的权利和义务是根据()决定的。
Incaseyoucanmakeareduction_5%_yourprice,wemaystrikethedealwithyou.
万先生于2013年5月13日收到电文“你10日电我方接受,但支付条件由D/P改为L/C即期”,该电文是()。
征信服务中心收到商业银行重新报送的更正信息后,应当在()个工作日内对异议信息进行更正。
有些贵州人不会说普通话,贵州人都喜欢吃辣椒。如果上述陈述为真,以下哪项陈述也是真的?
Noneofusexpectedthepresidentto_attheparty.Wethoughthewasstillinhospital.
A、Three.B、Twenty-four.C、Twohundred.D、Eight.A该题同样考查对数字的捕捉情况。而和religion同时出现的是数字three,因此选择选项A。
最新回复
(
0
)