SSCP · Question #286
Which of the following phases of a system development life-cycle is most concerned with maintaining proper authentication of users and processes to ensure appropriate access control decisions?
The correct answer is C. Operation/Maintenance. The Operation/Maintenance phase is where the live system is actively used and continually managed. This phase is most concerned with day-to-day security operations, including maintaining authentication mechanisms, managing user accounts, reviewing access controls, and patching…
Question
Options
- ADevelopment/acquisition
- BImplementation
- COperation/Maintenance
- DInitiation
How the community answered
(40 responses)- A3% (1)
- C95% (38)
- D3% (1)
Explanation
The Operation/Maintenance phase is where the live system is actively used and continually managed. This phase is most concerned with day-to-day security operations, including maintaining authentication mechanisms, managing user accounts, reviewing access controls, and patching vulnerabilities. Authentication and access control enforcement are ongoing operational concerns, not one-time design decisions. Initiation (D), Development (A), and Implementation (B) are pre-operational phases focused on building and deploying the system, not running it.
Topics
Community Discussion
No community discussion yet for this question.