(ISC)2(ISC)2
CISSP · Question #9
CISSP Question #9: Real Exam Question with Answer & Explanation
Sign in or unlock CISSP to reveal the answer and full explanation for question #9. The question stem and answer options stay visible for context.
Submitted by ashley.k· Mar 5, 2026Security Engineering
Question
When in the Software Development Life Cycle (SDLC) MUST software security functional requirements be defined?
Options
- AAfter the system preliminary design has been developed and the data security categorization has
- BAfter the vulnerability analysis has been performed and before the system detailed design begins
- CAfter the system preliminary design has been developed and before the data security
- DAfter the business functional analysis and the data security categorization have been performed
Unlock CISSP to see the answer
You've previewed enough free CISSP questions. Unlock CISSP for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SDLC security#security requirements#data classification#security by design