practice sheet · all objectives switch to smart practice →
Certified Application Security Engineer (C|ASE .NET)
A software team argues that once their developers follow secure coding guidelines, the application is fully secure and no further activity is needed. According to the CASE program philosophy, why is this reasoning flawed?
Explanation
CASE goes beyond just the guidelines on secure coding practices and includes secure requirement gathering, robust application design, and handling security issues in post development
Beyond Secure Coding – Challenging the traditional mindset where secure coding means a secure application.
An organization cites the data breaches at retailers such as Forever 21, GameStop, and Panera Bread to justify investing in application security training. According to the CASE.NET material, what was the alleged common root cause of these breaches?
Explanation
have faced massive data leakage, including their customers’ and employees’ personal and financial information, because their applications were faulty
who also faced similar breaches, owing to the same reason: lack of application security.
Locked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to review