1.10 Apply Product Development and Project Management Principles ISSMP Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company is using RAD to develop a new customer-facing application. The business users are heavily involved and provide feedback on prototypes. The security manager wants to ensure security is not overlooked. What is the best way to incorporate security into the RAD process?

   • AHave the security team build a separate prototype without user input
   • BInclude security requirements in the prototype evaluation criteria and review them with user feedback
   • CWait until the final prototype is approved before considering security
   • DSkip security reviews because the prototypes are not final products
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which practice aligns with lean principles in a security context?

   • AAdding multiple layers of redundant security reviews
   • BDocumenting every possible security scenario
   • CStreamlining security approval processes to reduce delays
   • DPerforming security testing only after deployment
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A security team is applying lean principles to its vulnerability management process. The current process requires a full manual assessment for every reported vulnerability, regardless of severity. This is causing a backlog. Which change best aligns with lean principles?

   • ATriage vulnerabilities by severity and apply a full manual assessment only to high-severity issues
   • BIgnore low-severity vulnerabilities to focus only on high-severity ones
   • CIncrease the frequency of manual assessments to clear the backlog faster
   • DAutomate the assessment of all vulnerabilities to eliminate manual work entirely
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   An organization is adopting lean principles to streamline its security review process. The current process requires multiple layers of manual approval for every code change, causing significant delays. The security team wants to reduce waste while maintaining necessary controls. Which action best aligns with lean principles?

   • AAutomate security checks for low-risk changes and reserve manual review for high-risk changes
   • BRequire the same level of review for all changes, regardless of risk
   • CEliminate all manual security reviews to speed up the process
   • DIncrease the number of approval layers to ensure thorough review
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   How can security be integrated into project quality assurance?

   • ABy removing security testing from the QA plan
   • BBy including security metrics in quality measurements
   • CBy delegating QA to external vendors
   • DBy focusing only on functional requirements
   Reveal Solution Discussion Select an answer first