首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
计算机
The following scenario will be used for questions 26, 27, and 28. Trent is the new manager of his company’s internal software de
The following scenario will be used for questions 26, 27, and 28. Trent is the new manager of his company’s internal software de
admin
2013-12-19
88
问题
The following scenario will be used for questions 26, 27, and 28.
Trent is the new manager of his company’s internal software development department. He has been told by his management that the group needs to be compliant with the international standard that provides guidance to organizations in integrating security into the processes used for managing their applications. His new boss told him that he should join and get familiar with the Web Application Security Consortium, and Trent just received an e-mail stating that one of the company’s currently deployed applications has a zero day vulnerability.
Which of the following best describes the consortium Trent’s boss wants him to join?
选项
A、Nonprofit organization that produces open-source software and follows widely agreed upon best-practice security standards for the World Wide Web.
B、U.S. DHS group that provides best practices, tools, guidelines, rules, principles, and other resources for software developers, architects, and security practitioners to use.
C、Group of experts who create proprietary software tools used to help improve the security of software worldwide.
D、Group of experts and organizations who certify products based on an agreed-upon security criteria.
答案
A
解析
A正确。Web应用安全联盟(Web Application Security Consortium,WASC)是一个非盈利组织,它是由一群国际专家、行业从业者和组织的代表(他们为万维网制定了开源且被广泛同意的最佳实践安全标准)组成的。
B不正确。因为美国的国土安全部(Department of Homeland Security,DHS)提供了最佳实践、工具、指南、规则、原理和其他资源,可供软件开发人员、架构师和安全从业者在其开发的每个阶段将安全嵌入软件中。这个DHS首创了被称为开发必需的组成部分(BSI)的概念,它是不同行业的许多实体参与并提供有用材料的共同努力。
C不正确。因为这是一个干扰项。不存在某个官方组织为所列的目的提供合适的工具。
D不正确。因为Web应用安全联盟并不认证产品。相反,它为如何将安全性整合到软件提供指导方针和开源的最佳实践。
转载请注明原文地址:https://kaotiyun.com/show/qNhZ777K
0
CISSP认证
相关试题推荐
Themassmediaisabigpartofourculture,yetitcanalsobeahelper,adviserandteachertoouryounggeneration.Themass
TheTreasurycouldpocket20millionayearinextrafinesoncethecountry’sspeedcameranetworkisexpanded.Motoringorgani
Thetranslatormusthaveanexcellent,up-to-dateknowledgeofhis【C1】______languages,fullfacilityinthehandlingofhistarg
Thetranslatormusthaveanexcellent,up-to-dateknowledgeofhis【C1】______languages,fullfacilityinthehandlingofhistarg
[A]Marketforglasscraftsisgrowing[B]Dependenceofcomputerdevelopmentonglass[C]Behindtheadaptabilityofglass[D]
Writeanessayof160-200wordsbasedonthefollowingdrawing.Inyouressay,youshould1)describethedrawingbriefly,
Writeanessayof160-200wordsbasedonthefollowingpictures.Inyouressay,youshould1)describethepicturesbriefly,
Ifsoldieringwasforthemoney,theSpecialAirService(SAS)andtheSpecialBoatService(SBS)wouldhavedisintegratedinre
Inarareunanimousruling,theUSSupremeCourthasoverturnedthecorruptionconvictionofaformerVirginiagovernor,Robert
"THESERVANT"(1963)isoneofthosefilmsthatitisimpossibletoforget.Theservantexploitshismaster’sweaknessesuntilh
随机试题
血浆胶体渗透压决定于
下列说法中错误的是
直角刚杆OAB可绕固定轴O在图所示的平面内转动,已知OA=40cm,AB=30cm,ω=2rad/s,ε=1rad/s2。则图示瞬时,B点的加速度在x和y向的投影分别为()。①40cm/s2②00cm/s2③50cm/s2④一200cm/s2
下列关于能源资源开发利用的表述中,错误的是()
( )的税收负担随着计税依据数额的增加而递增,能够较好地体现纳税人的税负水平与税负能力相适应的原则,可以更有效地调节纳税人的收入、财产等,正确处理税收负担公平问题,多在所得、财产课税中应用。
某大型工程项目由政府投资建设,业主委托某招标代理公司代理施工招标。招标代理公司确定该项目采用公开招标方式招标,招标公告在当地政府规定的招标信息网上发布。招标文件中规定:投标担保可采用投标保证金或投标保函方式担保,评标疗法采用经评审的最低投标价法,投标有效期
甲公司为增值税一般纳税企业,该企业购进固定资产的增值税额可以抵扣,适用的增值税税率为17%。甲公司2013年至2016年与固定资产有关的业务资料如下:(1)2013年11月1日,甲公司以自营方式建造一条生产线。购入工程物资,取得的增值税专用发票上注明的价
固定资产的各组成部分具有不同使用寿命或者以不同方式为企业提供经济利益的,应当将各组成部分分别确认为单项固定资产。( )
某学校购买一批牛奶到一敬老院慰问老人。如果送给每位老人4盒牛奶,那么还剩28盒;如果送给每位老人5盒,那么最后一位老人又不足4盒,则该敬老院的老人人数至少是:
设有两个事务T1、T2,对数据A的并发操作如下图所示。下列说法中正确的是()。
最新回复
(
0
)