Question: Which of the following is not an information domain required for determining function point in FPA ?

• 1. Number of user Input
• 2. Number of user Inquiries
• 3. Number of external Interfaces
• 4. Number of errors

Question: A system resource that has a value and has to be protected is known as ________________________?

• 1. Asset
• 2. Control
• 3. Vulnerability
• 4. None of the mentioned

Question: What is Life cycle risk assessment ?

• 1. Risk assessment before the system has been deployed
• 2. Risk assessment while the system is being developed
• 3. All of the mentioned
• 4. None of the mentioned

Question: Controls that are intended to ensure that attacks are unsuccessful is analogous to ______________ in dependability engineering?

• 1. Fault avoidance
• 2. Fault tolerance
• 3. Fault detection
• 4. Fault Recovery

Question: What are security controls ?

• 1. Controls that are intended to ensure that attacks are unsuccessful
• 2. Controls that are intended to detect and repel attacks
• 3. Controls that are intended to support recovery from problems
• 4. All of the mentioned

Question: Which of the following is a layer of protection for Security ?

• 1. Platform-level protection
• 2. Application-level protection
• 3. Record-level protection
• 4. All of the mentioned

Question: Which of the following is a bad practice of Dependable programming ?

• 1. Limit the visibility of information in a program
• 2. Check array bounds
• 3. Check all inputs for validity
• 4. None of the mentioned

Question: Which of the following is not a Protection system ?

• 1. System to stop a train if it passes a red light
• 2. System to indicate not returning of the library book
• 3. System to shut down a reactor if temperature/pressure are too high
• 4. None of the mentioned

Question: What is a Range check ?

• 1. Check that the input does not exceed some maximum size e.g. 40 characters for a name
• 2. Check that the input falls within a known range
• 3. Use information about the input to check if it is reasonable rather than an extreme value
• 4. None of the mentioned

Question: What is the term for a system that is designed such that the faults in the delivered software do not result in system failure ?

• 1. Fault Avoidance
• 2. Fault detection
• 3. Fault tolerance
• 4. None of the mentioned