VCE Software Development U4O2 Crossword: Security controls for development practices and stored data and Threat modelling and evaluating security practices (Modules 49–72)
Name:
Date:
Class:
✎
Crossword
Read each clue and write the matching term in the grid. Numbers in brackets show the letters in each word.
1
2
3
4
5
6
7
8
9
10
Across
- 3. The regular, planned process of finding, testing and installing updates that fix known vulnerabilities in software, including libraries and frameworks. Word 2 of: patch __________ (10)
- 7. Word 6 of the term in 6 Down: Encryption at ____ and in _______ (7)
- 8. Word 1 of the term in 2 Down: ____ __________ (4)
- 9. Keeping development, testing and production apart so untested code and live data never mix, and access to each is controlled separately. It also helps contain a breach. Word 1 of: ___________ separation (11)
- 10. Controlling who can read and change a code repository and protecting what is stored in it, e.g. private repos, roles, a protected main branch, no secrets in commits, audit logs. Word 2 of: __________ ________ (8)
Down
- 1. Tools that scan source code or dependencies for known insecure patterns and vulnerable components. They support, but do not replace, human code review. Word 3 of: _________ ____ ________ (8)
- 2. A central store for a project's source ______ and its version history, shared by a team through commits, branches, pull requests and access settings (private or public). Word 2 of: ____ __________ (10)
- 4. Word 1 of the term in 1 Down: _________ ____ ________ (9)
- 5. A structured way to work out what could go wrong with a system, before and during development, so risks are found, fixed and confirmed early and then reviewed again. Word 2 of: threat _________ (9)
- 6. Encrypting data both while stored (databases, backups) and while moving over a network (TLS), so intercepted or stolen data stays unreadable without the key. Word 3 of: Encryption at ____ and in _______ (4)
Answer Key
VCE Software Development U4O2 · Modules 49–72
1A
N
2R
3M
4A
N
A
G
E
M
E
N
T
U
L
P
T
Y
O
O
S
S
M
I
I
5M
6R
7T
R
A
N
S
I
T
8C
O
D
E
T
O
D
S
9E
N
V
I
R
O
N
M
E
N
T
D
Y
L
L
10S
E
C
U
R
I
T
Y
N
G
Across
3MANAGEMENT — The regular, planned process of finding, testing and installing updates that fix known vulnerabilities in software, including libraries and frameworks. Word 2 of: patch __________
7TRANSIT — Word 6 of the term in 6 Down: Encryption at ____ and in _______
8CODE — Word 1 of the term in 2 Down: ____ __________
9ENVIRONMENT — Keeping development, testing and production apart so untested code and live data never mix, and access to each is controlled separately. It also helps contain a breach. Word 1 of: ___________ separation
10SECURITY — Controlling who can read and change a code repository and protecting what is stored in it, e.g. private repos, roles, a protected main branch, no secrets in commits, audit logs. Word 2 of: __________ ________
Down
1ANALYSIS — Tools that scan source code or dependencies for known insecure patterns and vulnerable components. They support, but do not replace, human code review. Word 3 of: _________ ____ ________
2REPOSITORY — A central store for a project's source ______ and its version history, shared by a team through commits, branches, pull requests and access settings (private or public). Word 2 of: ____ __________
4AUTOMATED — Word 1 of the term in 1 Down: _________ ____ ________
5MODELLING — A structured way to work out what could go wrong with a system, before and during development, so risks are found, fixed and confirmed early and then reviewed again. Word 2 of: threat _________
6REST — Encrypting data both while stored (databases, backups) and while moving over a network (TLS), so intercepted or stolen data stays unreadable without the key. Word 3 of: Encryption at ____ and in _______