Agile Development Lifecycle Models CT-STE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In Agile development, the value 'individuals and interactions over processes and tools' implies that security testing should primarily rely on:

   • ASecurity testing tools that are integrated into the CI/CD pipeline
   • BFormal security test plans and documented procedures
   • CDirect communication and collaboration between security testers and developers
   • DAutomated security scanning tools to replace manual analysis
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security tester is used to creating a detailed, risk-based test plan at the beginning of a project. In an Agile project, the tester finds that the plan is quickly outdated. What is the most effective way to maintain a security test strategy in this environment?

   • ACreate a lightweight, living security test strategy that is reviewed and updated at the start of each sprint.
   • BAbandon the test strategy entirely and rely on ad-hoc testing.
   • CCreate a new, detailed test plan every single day.
   • DCreate a detailed test plan once and refuse to change it, as it is the source of truth.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security tester proposes a comprehensive security test plan that must be fully completed before any code is released. The product owner rejects this plan because it would delay the release of a critical feature. Which Agile principle best supports the product owner's decision?

   • AWelcome changing requirements, even late in development.
   • BDeliver working software frequently, with a preference for the shorter timescale.
   • CBuild projects around motivated individuals and give them the environment and support they need.
   • DThe most efficient and effective method of conveying information is face-to-face conversation.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary benefit of automating security tests in an Agile development lifecycle?

   • AIt eliminates the need for manual security testing
   • BIt removes the need for security testers in the team
   • CIt guarantees that all security vulnerabilities are found
   • DIt allows security tests to be executed quickly and consistently with each iteration
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   In an Agile team, a developer is implementing a new authentication feature. The team's security tester is currently focused on a different feature. Who is primarily responsible for ensuring that the authentication feature is designed and implemented securely?

   • AThe security tester, because they are the only person with security expertise.
   • BThe entire team, with the security tester providing guidance and support.
   • CThe scrum master, because they facilitate the team's processes.
   • DThe product owner, because they define the feature requirements.
   Reveal Solution Discussion Select an answer first