Which concept ensures applications meet an acceptable level of security for the functions they are designed to provide?

• A. Code Signing
• B. Sandbox
• C. Standard Libraries
• D. Software Assurance

Answer: (D)

The idea being tested is software assurance, which is about making sure applications meet an acceptable level of security for the functions they are designed to provide. Software assurance encompasses secure development practices, rigorous testing and verification, risk management, and adherence to standards throughout the software’s life cycle. This broad approach is what actually guarantees that the software’s features operate with security in mind and at an appropriate level of risk.

Code signing is about proving who authored the code and that it hasn’t been tampered with, not about how securely the app’s functions perform. A sandbox helps contain what a program can do at runtime, reducing potential damage but not by itself ensuring the overall security level of the application’s features. Standard libraries provide common functionality but don’t guarantee that the application as a whole meets security requirements.