Develop System Requirements ISSEP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which output is the primary result of the system security context development process?

   • AA detailed system design specification
   • BA description of the system's operational environment and security constraints
   • CA final risk assessment report
   • DA list of approved security controls for the system
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Why is traceability important in security requirements analysis?

   • AIt guarantees that all requirements are implemented
   • BIt ensures requirements are written in a standard language
   • CIt links requirements to system objectives and risks
   • DIt reduces the number of requirements
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of a Security Concept of Operations (CONOPS)?

   • ATo describe how security is integrated into the system's operational concept and functions
   • BTo provide a detailed network diagram of the system
   • CTo document the system's budget for security
   • DTo list all security controls that will be implemented
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A manufacturing company is developing a new industrial control system. The system will be connected to the internet for remote monitoring. The security team is defining the system security context. Which of the following is a key stakeholder to include in this process?

   • AThe system operators who will use the system daily.
   • BThe competitors who might attack the system.
   • CThe marketing team who will promote the system.
   • DThe external auditors who will review the system after deployment.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the purpose of a System Security Requirements Baseline?

   • ATo record the results of security testing
   • BTo document the agreed-upon security needs and constraints for the system
   • CTo provide a list of all potential security threats
   • DTo describe the system's hardware architecture
   Reveal Solution Discussion Select an answer first