What is a key advantage of using RAD for security?

Security is handled by the development tool

Security is automatically included in prototypes

Early user feedback can reveal security concerns

Security is not needed because development is fast

A large enterprise is developing a new customer relationship management (CRM) system. The requirements are well understood, the project is large, and the organization has a culture that values detailed documentation. However, the market is competitive, and time-to-market is critical. Which methodology is most appropriate?

Waterfall, because the requirements are well understood and documentation is valued

RAD, because it focuses on prototyping and user feedback

Lean, because it eliminates all documentation to speed up delivery

Agile, because it allows for iterative delivery and faster time-to-market

A project manager is leading a critical system upgrade with a fixed budget and a regulatory deadline. The initial scope included a comprehensive security testing phase, but a new requirement has emerged that will consume 20% of the budget. The project cannot miss the deadline. Which trade-off decision best maintains the security posture?

Extend the project timeline by two months to accommodate the new requirement and keep full security testing

Reduce the scope of security testing to only the highest-risk components and document the residual risk

Ask the customer to provide additional funding for the new requirement and the full security testing

Remove the security testing phase entirely to stay within budget and meet the deadline

In which phase of the system development lifecycle (SDLC) should security requirements first be considered to ensure security is built in rather than added on?

Requirements gathering and analysis

Which project characteristic would most likely lead to selecting a waterfall methodology?

Small team with high collaboration

Stable, well-defined requirements

Need for quick delivery of a prototype

Information Systems Security Management Professional

Domain 1Objective 10

1.10 Apply Product Development and Project Management Principles ISSMP Practice Questions (Page 1)

Part of the Leadership and Organizational Management domain, which accounts for 21% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 2–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

14concepts

21%of the exam

Questions 1–5

1foundation · easy
What is a key advantage of using RAD for security?
Select an answer first
2expert · hard
A large enterprise is developing a new customer relationship management (CRM) system. The requirements are well understood, the project is large, and the organization has a culture that values detailed documentation. However, the market is competitive, and time-to-market is critical. Which methodology is most appropriate?
Select an answer first
3expert · hard
A project manager is leading a critical system upgrade with a fixed budget and a regulatory deadline. The initial scope included a comprehensive security testing phase, but a new requirement has emerged that will consume 20% of the budget. The project cannot miss the deadline. Which trade-off decision best maintains the security posture?
Select an answer first
4foundation · easy
In which phase of the system development lifecycle (SDLC) should security requirements first be considered to ensure security is built in rather than added on?
Select an answer first
5foundation · easy
Which project characteristic would most likely lead to selecting a waterfall methodology?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

1.10 Apply Product Development and Project Management Principles ISSMP Practice Questions (Page 1)

Questions 1–5

What is a key advantage of using RAD for security?

In which phase of the system development lifecycle (SDLC) should security requirements first be considered to ensure security is built in rather than added on?

Which project characteristic would most likely lead to selecting a waterfall methodology?

Keep studying — Leadership and Organizational Management