CSQE Practice Questions

A.  

the effort to penetrate the system costs more than the value of the information obtained

B.  

passwords needed for system access must be changed on an annual basis and may not be reused

C.  

passwords cannot be shared in the end-user environment

D.  

users who do not have administrative rights are locked out of the system during non-working hours

A.  

Piloting

B.  

Peer reviews

C.  

Quality gates

D.  

Mathematical proofs

A.  

Require the vendor to adhere to the keens mg agreement for product fixes.

B.  

Audit the vendor ' s quality- system.

C.  

Require the vendor to place the object code into escrow.

D.  

Test the product to determine whether it satisfies critical functions.

A.  

Distributors: developers, suppliers

B.  

Distributors, suppliers, users

C.  

Indirect user, direct user, customers

D.  

Indirect user, direct user, distributor

A.  

trend the number of security breaches

B.  

improve recovery time from system failures

C.  

have limitations on who can access the system

D.  

switch to a degraded mode of operation when encountering a breach

A.  

establishes decision-making patterns

B.  

speeds decision-making

C.  

produces new information

D.  

focuses management s attention on the team

A.  

Data normalization

B.  

Acceptance test planning

C.  

Functional testing

D.  

Reliability modeling

A.  

Establishing separate cases for each level

B.  

Creating a central repository for data items

C.  

Using data items from the operational environment

D.  

Identifying data items that have become defective over time

A.  

Internal audit

B.  

External audit

C.  

Training

D.  

Root cause analysis

A.  

The more a developer knows about the implementation, the more reusable a component will be.

B.  

Information-hiding impedes the development of reusable components.

C.  

Development costs are improved by reusable components.

D.  

Modifying a previously used module is an example of module reuse.