8.1 - Understand and Integrate Security in the Software Development Life Cycle (SDLC) CISSP Practice Questions (Page 6)

Questions 26–28

1. 26expert · hard · select all that apply

   An application is in the operation and maintenance phase. The security team is planning to improve its incident response capabilities. Which of the following are effective activities? (Select all that apply.)

   • ADisable logging to reduce storage costs.
   • BWait for a real incident to test the incident response plan.
   • CImplement continuous monitoring to detect anomalies early.
   • DEstablish a cross-functional incident response team that includes developers and operations.
   • EConduct regular tabletop exercises to test the incident response plan.
   Check answers Discussion Select an answer first
2. 27foundation · easy

   During the operation and maintenance phase, which activity is essential for detecting and responding to security incidents in a timely manner?

   • AConducting user acceptance testing
   • BImplementing continuous monitoring of logs and system activity
   • CUpdating the project schedule
   • DPerforming a code review of the entire application
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   An application is in production and receives regular updates. The security team notices that some patches are not being applied consistently across all servers. What is the MOST effective way to ensure consistent patch management?

   • AApply patches only when a vulnerability is exploited.
   • BImplement an automated patch management system with a defined maintenance window.
   • CAsk administrators to manually apply patches when they have time.
   • DDisable automatic updates to avoid system downtime.
   Reveal Solution Discussion Select an answer first