Higher Test Marks with Free Online Secure-Software-Design Exam Practice

A new product does not display personally identifiable information, will not let private documents be printed, and requires elevation of privilege to retrieve archive documents. Which secure coding practice is this describing?

Which security assessment deliverable identities unmanaged code that must be kept up to date throughout the life of the product?

Automated security testing was performed by attempting to log in to the new product with a known username using a collection of passwords. Access was granted after a few hundred attempts. How should existing security controls be adjusted to prevent this in the future?

Which threat modeling methodology involves creating or using collections of similar threats? 

Which secure coding best practice says to use well-vetted algorithms to ensure that the application uses random identifiers, that identifiers are appropriately restricted to the application, and that user processes are fully terminated on logout?