A project sponsor has allocated a budget for a new system. The security manager must ensure that security activities are funded. Which approach best ensures security is considered in the budget?

Include a line item for security activities (e.g., threat modeling, testing, training) in the project budget from the start

Request additional security funding only after a vulnerability is discovered

Assume security is free because developers are already trained

Use the operations budget to cover security testing for the project

A development team is using agile and wants to integrate static analysis into their workflow. Which approach is most effective for catching security issues early?

Run static analysis on every code commit as part of the continuous integration pipeline

Run static analysis manually on a quarterly basis

Skip static analysis and rely on peer review only

Run static analysis only once, just before the final release

In an agile development environment, how is security typically incorporated?

Only during a final security phase before release

By a separate security team working independently

In each sprint, with security tasks included in the backlog

After each sprint, in a dedicated hardening sprint

Information Systems Security Management Professional

Domain 1Objective 10

1.10 Apply Product Development and Project Management Principles ISSMP Practice Questions (Page 6)

Part of the Leadership and Organizational Management domain, which accounts for 21% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 2–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

14concepts

21%of the exam

Questions 26–30

26foundation · easy
Which testing technique is specifically designed to identify vulnerabilities by simulating an attack from outside the system?
Select an answer first
27application · medium
A project sponsor has allocated a budget for a new system. The security manager must ensure that security activities are funded. Which approach best ensures security is considered in the budget?
Select an answer first
28application · medium
A development team is using agile and wants to integrate static analysis into their workflow. Which approach is most effective for catching security issues early?
Select an answer first
29foundation · easy
In an agile development environment, how is security typically incorporated?
Select an answer first
30foundation · easy
When a project manager reduces the scope of security testing to meet a deadline, what is being traded off?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

1.10 Apply Product Development and Project Management Principles ISSMP Practice Questions (Page 6)

Questions 26–30

Which testing technique is specifically designed to identify vulnerabilities by simulating an attack from outside the system?

A project sponsor has allocated a budget for a new system. The security manager must ensure that security activities are funded. Which approach best ensures security is considered in the budget?

A development team is using agile and wants to integrate static analysis into their workflow. Which approach is most effective for catching security issues early?

In an agile development environment, how is security typically incorporated?

When a project manager reduces the scope of security testing to meet a deadline, what is being traded off?

Keep studying — Leadership and Organizational Management