CAS-001 · Question #47
The Chief Executive Officer (CEO) has asked a security project manager to provide recommendations on the breakout of tasks for the development of a new product. The CEO thinks that by assigning…
The correct answer is B. Systems Engineering. Decomposing requirements. Option B correctly maps tasks to groups based on their domain expertise: Systems Engineering handles 'Decomposing requirements' (translating business needs into technical specs is a core SE function); Development owns 'Secure coding standards' (developers implement and enforce…
Question
The Chief Executive Officer (CEO) has asked a security project manager to provide recommendations on the breakout of tasks for the development of a new product. The CEO thinks that by assigning areas of work appropriately the overall security of the product will be increased, because staff will focus on their areas of expertise. Given the below groups and tasks select the BEST list of assignments.
- Groups: Networks, Development, Project Management, Security, Systems
Engineering, Testing
- Tasks: Decomposing requirements, Secure coding standards, Code
stability, Functional validation, Stakeholder engagement, Secure transport
Options
- ASystems Engineering. Decomposing requirements
- BSystems Engineering. Decomposing requirements
- CSystems Engineering. Functional validation
- DSystems Engineering. Decomposing requirements
How the community answered
(43 responses)- A33% (14)
- B49% (21)
- C12% (5)
- D7% (3)
Explanation
Option B correctly maps tasks to groups based on their domain expertise: Systems Engineering handles 'Decomposing requirements' (translating business needs into technical specs is a core SE function); Development owns 'Secure coding standards' (developers implement and enforce them); Testing owns 'Code stability' and 'Functional validation' (QA verifies code behaves as expected); Project Management handles 'Stakeholder engagement' (PMs communicate with stakeholders); Security and Networks handle 'Secure transport' (securing communication channels is a joint network/security responsibility). The other options misalign tasks with groups - for example, assigning functional validation to Systems Engineering or stakeholder engagement to a technical group.
Topics
Community Discussion
No community discussion yet for this question.