Agile Development Lifecycle Models CT-STE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the role of the Product Owner in supporting security testing in an Agile team?

   • ATo conduct security risk assessments on the production environment
   • BTo prioritize security-related backlog items and ensure security requirements are included in user stories
   • CTo write security test automation scripts
   • DTo execute security tests and report vulnerabilities
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In an Agile team, which role is primarily responsible for defining and prioritizing security-related acceptance criteria for user stories?

   • ADeveloper
   • BProduct Owner
   • CSecurity Tester
   • DScrum Master
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security tester is the only security expert on a large Agile team. The team is struggling to keep up with security reviews for all the features being developed. The tester is becoming a bottleneck. Which approach would best address this problem?

   • AThe tester should perform a security review of every single code change to ensure nothing is missed.
   • BThe tester should focus on coaching developers to perform basic security checks themselves, and reserve their own time for high-risk features and complex security issues.
   • CThe tester should ask the product owner to reduce the team's velocity to allow more time for security testing.
   • DThe tester should create a detailed security test plan and ask the team to follow it without their involvement.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In a sprint retrospective, what is the primary purpose of discussing security testing activities?

   • ATo report security vulnerabilities to management
   • BTo identify what went well and what can be improved in the security testing process
   • CTo assign security testing tasks for the next sprint
   • DTo demonstrate security testing results to stakeholders
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How should a security tester collaborate with developers in an Agile team to ensure security is considered during development?

   • ABy working independently and reporting issues only at the end of the sprint
   • BBy providing security guidance and reviewing code changes as they are developed
   • CBy waiting for developers to request security testing
   • DBy focusing only on testing the final product after all features are complete
   Reveal Solution Discussion Select an answer first