[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9jeXmY1pid2GqV2rwiFejM-xAMNDbYshEhh7L_9jFM4":3},{"answer":4,"createTime":5,"id":6,"options":7,"origin":12,"question":19,"related":20,"source":24,"type":25},[],"2025-12-14 10:01:39",264118414,[8,9,10,11],"问题大多出在电脑硬件老化上","问题都是由于用户不会操作软件造成的","问题都是黑客太厉害造成的,无法预防","问题大多是因为软件最初的设计方案就忽略了安全",{"count":13,"courseId":14,"courseImg":15,"courseName":16,"workId":17,"workName":18},33,"53e1d2ef4961cca8eea3e23969ad2cb9","https:\u002F\u002Ftihai-oss-cloud.itihey.com\u002Fimg\u002F03a579384a6dc297c89809b582fcc767.png","默认课程","exam_168069382","《软件开发安全》模拟试卷","关于软件安全问题产生的原因,下面哪种说法更准确",[21,26,35,44,53,62,71,80,89,98],{"answer":22,"createTime":5,"id":6,"options":23,"question":19,"source":24,"type":25},[],[8,9,10,11],"v1",0,{"answer":27,"createTime":5,"id":28,"options":29,"question":34,"source":24,"type":25},[],264118415,[30,31,32,33],"构造","验证","以上都是","治理","软件保证成熟度模型(SAMM)中,以下哪一项是核心业务职能",{"answer":36,"createTime":5,"id":37,"options":38,"question":43,"source":24,"type":25},[],264118416,[39,40,41,42],"对网络实施分等级保护、分级监管","以上说法都正确","对网络中发生的安全事件分等级响应、处置","对网络中使用的网络安全产品实行按等级管理","关于网络安全等级保护,下列哪项说法是正确的",{"answer":45,"createTime":5,"id":46,"options":47,"question":52,"source":24,"type":25},[],264118417,[48,49,50,51],"网络层","数据访问层","业务逻辑层","用户视图层","下列哪一项不属于Web三层通用架构",{"answer":54,"createTime":5,"id":55,"options":56,"question":61,"source":24,"type":25},[],264118418,[57,58,59,60],"逻辑架构","系统架构","功能架构","物理架构","为了达到控制软件复杂性、提高软件系统质量、支持软件开发和复用的目的,开发人员提出了软件架构的概念.下列哪一项不属于软件架构的常见分类",{"answer":63,"createTime":5,"id":64,"options":65,"question":70,"source":24,"type":25},[],264118419,[66,67,68,69],"这样可以让软件运行得更快","其中一种措施肯定无效","为了遵循纵深防御原则,即使一层防护失效,另一层仍可能提供保护","法律强制要求必须这样做","在软件系统中,为了防止数据泄露,同时使用了"权限控制"和"数据加密"两种措施,这主要是因为",{"answer":72,"createTime":5,"id":73,"options":74,"question":79,"source":24,"type":25},[],264118420,[75,76,77,78],"广泛性与具体性","主观性与客观性","持久性与时效性","可利用性与隐蔽性","从漏洞的时间特性、作用域特性和可利用性特性来看,以下哪组特性不匹配这三个维度",{"answer":81,"createTime":5,"id":82,"options":83,"question":88,"source":24,"type":25},[],264118421,[84,85,86,87],"零日漏洞","潜伏漏洞","一日漏洞","历史漏洞","某安全团队在漏洞评估时发现一个已知漏洞:该漏洞的利用代码已在网上流传,但厂商尚未发布修复补丁.根据漏洞生命周期分类,该漏洞属于",{"answer":90,"createTime":5,"id":91,"options":92,"question":97,"source":24,"type":25},[],264118422,[93,94,95,96],"漏洞成因","攻击向量","漏洞利用位置","威胁类型","在软件漏洞的常用分类方法中,本地漏洞和远程漏洞是基于 的分类",{"answer":99,"createTime":5,"id":100,"options":101,"question":106,"source":24,"type":25},[],264118423,[102,103,104,105],"性能需求","逆向需求","功能需求","接口需求","通常对软件系统有几个方面的综合要求,其中,"划分出系统必须完成的所有功能"属于"]