topic Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide. in CISSP Study Group

Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide.

gopalk — Sat, 04 Dec 2021 00:39:50 GMT

Hi Need some help with the below question.

Most software vulnerabilities exist because of a lack of secure or defensive coding practises used by developers. Which of the following is not considered a secure coding technique. (Choose all that apply)

A. Using immutable systems

B. Using stored procedures

C. Using code signing

D. Using Server side validation

E Optimizing file sizes

F Using third-party software libraries.

Re: Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide.

gopalk — Sat, 04 Dec 2021 00:42:08 GMT

Answer Key reveals ABCD. But I think the "NOT" was not considered.

Re: Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide.

radhika_ajay — Tue, 15 Feb 2022 16:14:55 GMT

I think the answer should be a, e and f?

Re: Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide.

BrianF — Wed, 16 Feb 2022 14:15:48 GMT

Not to sound snarky but the answers in the appendix do a fantastic job at explaining the answers.

That said, I found some errors within multiple books and reported them to the publishers.

Good luck!

Re: Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide.

azekta — Wed, 23 Feb 2022 15:19:48 GMT

A using immutable system is not secure coding technique.

Re: Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide.

dpower — Sun, 04 Jun 2023 14:48:05 GMT

I messaged ISC2 for the answer and still waiting on a response.

Re: Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide.

JohnEricsson — Wed, 01 Nov 2023 10:09:46 GMT

Is this it:

(ISC)2 CISSP Certified Information Systems Security Professional Official Study Guide, 9th Edition | Wiley

(in case the url is removed: it is from wiley dot com in an errata section of the book --google the name of the book and errata)

"This should read:

40. B, C, D. Programmers need to adopt secure coding practices, which include using stored procedures, code signing, and server-side validation."

This could still be wrong, and it may fit with the claim they forgot the "not"

Re: Answer Explanation for Assessment Test Question 40 Sybex Official Study Guide.

Mahender — Fri, 20 Sep 2024 08:28:35 GMT

In the context of secure coding techniques, the following options are not considered secure coding practices:

E. Optimizing file sizes
F. Using third-party software libraries

While optimizing file sizes can improve performance, it does not directly relate to security practices. Similarly, using third-party software libraries can introduce vulnerabilities if those libraries are not properly vetted or maintained.

The other options—using immutable systems, stored procedures, code signing, and server-side validation—are all considered secure coding practices.