secure software enginering question:

1) Most of the historical knowledge of security issues and changes can be found in?

options:-

a audit trait

b automated security logs

c code documentation

d authentication. authorization record

e all of above

f none of above

g. a,b,d

2) are these possible buffer overflow what? If so, which line(s) of the code? under what conditions would be overflow (s) occur?

3) why are deprecated command strcpy() still permitted is most compilers?

4) what is poor coding (but legal) coding problem in this code and why does it work?

5) explain how security requirement are used as part of overall risk-based software security (what information you risk analysis and what does the output of risk analysis inform?

6) How is security assurance related to risk mitigation?

7 describe Man in the middle based fuzzing attack?