8.18--CAESARII Version Knowledge Quiz

Thread Content

8.18--In the CAESARII version, those who answer questions correctly in the knowledge quiz receive 10 wealth points, while those who get them wrong receive 3 wealth points. The concept of software security assurance involves applying risk management principles throughout the entire lifecycle of the software, in order to achieve the best possible level of protection within limited resources. This helps to avoid direct losses resulting from inadequate safeguards; at the same time, it is also important to take into account the indirect losses that can arise from excessive safeguards. Among the following software security development strategies, the one that does not conform to the principles of software security assurance is: A. Conducting comprehensive security testing on the software before it is released, including source code analysis, fuzz testing, and penetration testing; software that has not undergone such testing is not allowed to be deployed. B. Inviting software security experts to review the software architecture design during the security design phase, in order to identify any security shortcomings in the architecture as early as possible. C. Ensuring that software developers receive security training, so that they understand the basic principles and methods of secure coding, thereby enabling them to write secure code. D. Taking into account the costs related to software security at the stage of project initiation, by allocating funds for security testing and security reviews, to ensure that these security-related expenses are covered&