An auditor is reviewing a traceability matrix to verify that a security standard's requirements are met. The auditor wants to confirm that each security requirement has been implemented and tested. What should the auditor look for in the matrix?

A list of all security requirements in the project.

The date when each requirement was approved.

The names of the developers who implemented each requirement.

Links from each requirement to design, code, and test artifacts.

What is the primary purpose of forward traceability in a security requirement traceability matrix?

To trace from design elements to the requirements they satisfy

To trace from code modules to the vulnerabilities they might contain

To trace from requirements forward to design, code, and test artifacts

To trace from test cases back to the requirements they verify

Certified Secure Software Lifecycle Professional

Domain 3Objective 7

Develop Security Requirement Traceability Matrix CSSLP Practice Questions (Page 7)

Part of the Secure Software Requirements domain, which accounts for 13% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

13%of the exam

Questions 31–32

31application · medium
An auditor is reviewing a traceability matrix to verify that a security standard's requirements are met. The auditor wants to confirm that each security requirement has been implemented and tested. What should the auditor look for in the matrix?
Select an answer first
32foundation · easy
What is the primary purpose of forward traceability in a security requirement traceability matrix?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Develop Security Requirement Traceability Matrix CSSLP Practice Questions (Page 7)

Questions 31–32

An auditor is reviewing a traceability matrix to verify that a security standard's requirements are met. The auditor wants to confirm that each security requirement has been implemented and tested. What should the auditor look for in the matrix?

What is the primary purpose of forward traceability in a security requirement traceability matrix?

Keep studying — Secure Software Requirements