Agile Development Lifecycle Models CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security tester is part of an Agile team. During a sprint review, a stakeholder asks why a specific security feature was not implemented. The product owner explains that it was deprioritized to deliver other features. What is the security tester's most appropriate role in this discussion?

   • ARemain silent, as the product owner is the sole decision-maker.
   • BPromise the stakeholder that the feature will be in the next sprint.
   • CExplain the security risk of the deprioritized feature to the stakeholder in clear, non-technical terms.
   • DCriticize the product owner's decision in front of the stakeholder.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When adapting a traditional security test strategy to Agile, which approach is most appropriate?

   • ACreate a comprehensive security test plan that covers the entire project and execute it once
   • BPerform all security testing in a dedicated phase after development is complete
   • CIntegrate security testing tasks into each sprint and align them with user stories
   • DRely solely on automated security tools to test the entire system at the end
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In an Agile environment, when a user story's security requirements change mid-sprint, what should the security tester do?

   • AAssess the impact of the change and communicate with the team to adjust security testing tasks
   • BIgnore the change and continue with the original security tests
   • CWait until the next sprint to address the change
   • DStop all testing until the requirements are finalized
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In an Agile team, which role is responsible for ensuring that security testing is considered during the daily stand-up and that security impediments are raised?

   • AScrum Master
   • BSecurity Tester
   • CDeveloper
   • DProduct Owner
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security tester is moving from a traditional waterfall project to an Agile team. In the waterfall project, the tester created a detailed master test plan and executed it in a dedicated testing phase. What is the most important adaptation the tester must make to be effective in Agile?

   • AFocus only on exploratory testing and abandon all test documentation.
   • BContinue to create a detailed master test plan and update it at the end of each sprint.
   • CWait for the development team to finish all features before starting any security testing.
   • DShift from a phase-based approach to a continuous testing approach, planning tests in short iterations and adapting them based on feedback.
   Reveal Solution Discussion Select an answer first