Question 1

Which of the following is NOT a question to ask about what you are assuming about each library function's actions?

Question 2

Assuming p is a pointer variable, why is the statement "p = malloc(-128);" poor programming?

Question 3

Which of the following is NOT a question about what users or remote servers will be supplying that is relevant to secure programming?

Question 4

Which of the following should you AVOID whenever possible?

Question 5

Which of the following is NOT a language used to state specifications for formal methods?

Question 6

Which principle of secure design does stepwise refinement follow?

Question 7

When you write a secure program, the goals must be __________.