nerdexam
(ISC)2

CISSP-ISSAP · Question #43

In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed?

The correct answer is A. Gap analysis. Gap analysis is correct because it specifically compares the current state (what exists) against the desired state (what should exist), making it the go-to tool for identifying missing services, dropped features, or functionality yet to be built - exactly the scenario…

Security Architecture Modeling

Question

In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed?

Options

  • AGap analysis
  • BRequirement analysis
  • CCost-benefit analysis
  • DVulnerability analysis

How the community answered

(21 responses)
  • A
    90% (19)
  • B
    5% (1)
  • D
    5% (1)

Explanation

Gap analysis is correct because it specifically compares the current state (what exists) against the desired state (what should exist), making it the go-to tool for identifying missing services, dropped features, or functionality yet to be built - exactly the scenario described.

Why the others are wrong:

  • B. Requirement analysis defines what a system should do from scratch; it doesn't compare existing capability against a target baseline.
  • C. Cost-benefit analysis evaluates financial feasibility, not functional completeness.
  • D. Vulnerability analysis identifies security weaknesses, not missing features or services.

Memory tip: Think of "gap" literally - a gap analysis finds the gaps between where you are and where you need to be. If something was forgotten, cut, or unfinished, it fell into the gap.

Topics

#Gap Analysis#Requirements Analysis#Software Development

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice