nerdexam
(ISC)2

SSCP · Question #286

Which of the following phases of a system development life-cycle is most concerned with maintaining proper authentication of users and processes to ensure appropriate access control decisions?

The correct answer is C. Operation/Maintenance. The Operation/Maintenance phase is where the live system is actively used and continually managed. This phase is most concerned with day-to-day security operations, including maintaining authentication mechanisms, managing user accounts, reviewing access controls, and patching…

Submitted by kavita_s· Apr 18, 2026Security Operations and Administration

Question

Which of the following phases of a system development life-cycle is most concerned with maintaining proper authentication of users and processes to ensure appropriate access control decisions?

Options

  • ADevelopment/acquisition
  • BImplementation
  • COperation/Maintenance
  • DInitiation

How the community answered

(40 responses)
  • A
    3% (1)
  • C
    95% (38)
  • D
    3% (1)

Explanation

The Operation/Maintenance phase is where the live system is actively used and continually managed. This phase is most concerned with day-to-day security operations, including maintaining authentication mechanisms, managing user accounts, reviewing access controls, and patching vulnerabilities. Authentication and access control enforcement are ongoing operational concerns, not one-time design decisions. Initiation (D), Development (A), and Implementation (B) are pre-operational phases focused on building and deploying the system, not running it.

Topics

#SDLC#Security Operations#Authentication#Access Control

Community Discussion

No community discussion yet for this question.

Full SSCP Practice