Integrate with System Development Methodology ISSEP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which SDLC model is characterized by sequential phases where each phase must be completed before the next begins?

   • AAgile
   • BWaterfall
   • CSpiral
   • DV-Model
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which SDLC model is best suited for projects where security risks must be evaluated and mitigated iteratively throughout development?

   • AWaterfall
   • BSpiral
   • CV-Model
   • DBig Bang
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In which phase of the system development life cycle should security requirements be formally documented and approved?

   • ADesign
   • BImplementation
   • CRequirements analysis
   • DMaintenance
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A startup is developing a new mobile app with a rapidly changing feature set. The product owner wants to release new versions every two weeks and incorporate user feedback quickly. The security team is concerned about introducing vulnerabilities with each release. Which SDLC model best balances the need for rapid iteration with the need to integrate security?

   • AV-model with security testing at each development stage
   • BSpiral model with risk analysis in each iteration
   • CWaterfall with a dedicated security phase after implementation
   • DAgile with security activities embedded in each sprint (e.g., threat modeling, security reviews, automated security testing)
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A systems engineering organization is using ISO/IEC 24641:2023 and MBSE to develop a new satellite communication system. The organization needs to verify that security requirements are met at each stage of the life cycle, and that the verification is documented for an external audit. Which combination of practices best meets this need?

   • ARelying on the MBSE model's built-in security features without additional verification
   • BPerforming a single security test at the end of the life cycle
   • CConducting informal security discussions at each stage without documentation
   • DUsing the MBSE model to generate verification artifacts and maintaining a traceability matrix that links requirements to verification results
   Reveal Solution Discussion Select an answer first