KEO1 Practice Test

KEO1 Practice Test practice questions, page 3 of 3, with answer review and explanations.

Question 11

Which type of manual code review technique is being used when the reviewer starts at an input control and traces its value through the application to each of the value’s outputs?

  1. Risk analysis
  2. Control flow analysis
  3. Data flow analysis
  4. Threat analysis

Question 12

Which step in the change management process includes modifying the source code?

  1. Patch management
  2. Installation management
  3. Privacy implementation assessment
  4. Policy compliance analysis

Question 13

The security team is reviewing all noncommercial software libraries used in the new product to ensure they are being used according to the legal specifications defined by the authors. What activity of the Ship SDL phase is being performed?

  1. Policy compliance analysis
  2. Open-source licensing review
  3. Penetration testing
  4. Final security review