SY0-501 · Question #309
Six months into development, the core team assigned to implement a new internal piece of software must convene to discuss a new requirement with the stake holders. A stakeholder identified a missing…
The correct answer is B. The system analysis phase of SSDSLC. The company is performing activities related to the system analysis phase of the Secure Software Development Life Cycle (SSDLC), focusing on evaluating a new requirement's feasibility and potential security risks.
Question
Six months into development, the core team assigned to implement a new internal piece of software must convene to discuss a new requirement with the stake holders. A stakeholder identified a missing feature critical to the organization, which must be implemented. The team needs to validate the feasibility of the newly introduced requirement and ensure it does not introduce new vulnerabilities to the software and other applications that will integrate with it. Which of the following BEST describes what the company?
Options
- AThe system integration phase of the SDLC
- BThe system analysis phase of SSDSLC
- CThe system design phase of the SDLC
- DThe system development phase of the SDLC
How the community answered
(35 responses)- A9% (3)
- B83% (29)
- C3% (1)
- D6% (2)
Why each option
The company is performing activities related to the system analysis phase of the Secure Software Development Life Cycle (SSDLC), focusing on evaluating a new requirement's feasibility and potential security risks.
The system integration phase occurs much later in the SDLC, involving the combination and testing of different software modules, which is distinct from the initial evaluation of a new requirement.
The system analysis phase of the SSDLC is where new requirements are gathered, their feasibility is assessed, and potential security implications and vulnerabilities are analyzed to ensure secure design and implementation moving forward. This directly matches the team's task of validating a new requirement's feasibility and ensuring it introduces no new vulnerabilities.
The system design phase focuses on creating detailed architectural and technical plans for *how* the software will be built, which typically follows the analysis and validation of requirements.
The system development phase involves the actual coding and building of the software, which happens after requirements have been analyzed and a design has been established.
Concept tested: Secure SDLC phases; requirement analysis and validation
Source: https://learn.microsoft.com/en-us/training/modules/azure-security-development-lifecycle/
Topics
Community Discussion
No community discussion yet for this question.