nerdexam
CompTIA

SY0-501 · Question #309

Six months into development, the core team assigned to implement a new internal piece of software must convene to discuss a new requirement with the stake holders. A stakeholder identified a missing…

The correct answer is B. The system analysis phase of SSDSLC. The company is performing activities related to the system analysis phase of the Secure Software Development Life Cycle (SSDLC), focusing on evaluating a new requirement's feasibility and potential security risks.

Submitted by packet_pusher· Mar 4, 2026Security program management and oversight

Question

Six months into development, the core team assigned to implement a new internal piece of software must convene to discuss a new requirement with the stake holders. A stakeholder identified a missing feature critical to the organization, which must be implemented. The team needs to validate the feasibility of the newly introduced requirement and ensure it does not introduce new vulnerabilities to the software and other applications that will integrate with it. Which of the following BEST describes what the company?

Options

  • AThe system integration phase of the SDLC
  • BThe system analysis phase of SSDSLC
  • CThe system design phase of the SDLC
  • DThe system development phase of the SDLC

How the community answered

(35 responses)
  • A
    9% (3)
  • B
    83% (29)
  • C
    3% (1)
  • D
    6% (2)

Why each option

The company is performing activities related to the system analysis phase of the Secure Software Development Life Cycle (SSDLC), focusing on evaluating a new requirement's feasibility and potential security risks.

AThe system integration phase of the SDLC

The system integration phase occurs much later in the SDLC, involving the combination and testing of different software modules, which is distinct from the initial evaluation of a new requirement.

BThe system analysis phase of SSDSLCCorrect

The system analysis phase of the SSDLC is where new requirements are gathered, their feasibility is assessed, and potential security implications and vulnerabilities are analyzed to ensure secure design and implementation moving forward. This directly matches the team's task of validating a new requirement's feasibility and ensuring it introduces no new vulnerabilities.

CThe system design phase of the SDLC

The system design phase focuses on creating detailed architectural and technical plans for *how* the software will be built, which typically follows the analysis and validation of requirements.

DThe system development phase of the SDLC

The system development phase involves the actual coding and building of the software, which happens after requirements have been analyzed and a design has been established.

Concept tested: Secure SDLC phases; requirement analysis and validation

Source: https://learn.microsoft.com/en-us/training/modules/azure-security-development-lifecycle/

Topics

#SDLC#requirements analysis#secure software development#stakeholder review

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice