431. What is Life cycle risk assessment ?
A. Risk assessment before the system has been deployed
B. Risk assessment while the system is being developed
C. All of the mentioned
D. None of the mentioned

432. A system resource that has a value and has to be protected is known as ________________________?
A. Asset
B. Control
C. Vulnerability
D. None of the mentioned

Explanation:
The answer is self explanatory.

433. Circumstances that have potential to cause loss or harm is known as___________________?
A. Attack
B. Threat
C. Vulnerability
D. Control

Explanation:
The answer is self explanatory.

434. An impersonation of an authorized user is an example of a security threat ?
A. True
B. False

Explanation:
It is a security attack.

435. Choose the fault class in which the following automated static analysis check would fall:”Pointer Arithmetic” ?
A. Storage management faults
B. Data Faults
C. Input/Output Faults
D. Interface faults

436. Static analysis is now routinely used in the development of many safety and security critical systems?
A. True
B. False

437. Choose the fault class in which the following automated static analysis check would fall: “Unreachable code”?
A. Control Faults
B. Data Faults
C. Input/Output Faults
D. Interface faults

438. Which level of Static Analysis allows specific rules that apply to a program to be checked ?
A. Characteristic error checking
B. User-defined error checking
C. Assertion checking
D. All of the mentioned

439. Choose the fault class in which the following automated static analysis check would fall:”Non-usage of the results of functions”?
A. Storage management faults
B. Data Faults
C. Input/Output Faults
D. Interface faults

440. Choose the fault class in which the following automated static analysis check would fall:”Variables declared but never used”?
A. Control Faults
B. Data Faults
C. Input/Output Faults
D. Interface faults

NOTE
IF YOU THINK ANY OF THE MCQ ABOVE IS WRONG.
PLEASE COMMENT WITH CORRECT ANSWER AND ITS DETAIL EXPLANATION IN COMMENT BOX.
THANK YOU