MENU
A security professional recommends that a company integrate threat modeling into its Agile development processes. Which of the following BEST describes the benefits of this approach?
Suggested Answer: B
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
LI
Lino
11 months ago
I thought we usually deal with threats later in the process?
CO
Cordie
11 months ago
Totally agree, catching threats early is key!
ER
Ernest
11 months ago
Wait, are we sure it improves user acceptance?
AL
Aleisha
11 months ago
I think it could actually increase development costs.
JU
Justine
11 months ago
Definitely helps address threats earlier in the SDLC!
CE
Cecily
12 months ago
I vaguely recall that threat modeling is supposed to help reduce costs, but I’m not convinced that’s the primary focus here.
KA
Karma
12 months ago
I practiced a similar question, and I think improving user acceptance of security controls is important, but it might not be the main benefit of threat modeling.
CH
Chauncey
12 months ago
I’m not entirely sure, but I feel like addressing threats later in the SDLC could lead to more issues down the line. That makes me lean away from B.
JE
Jerry
1 year ago
I remember discussing how integrating threat modeling can help identify risks early in the SDLC, so I think D might be the right choice.
JU
Justine
1 year ago
Ah, I see. Integrating threat modeling helps improve security controls and user acceptance. That makes sense - it's all about addressing security concerns upfront in the development process.
YE
Yen
1 year ago
Hmm, I'm a bit unsure about this one. I know threat modeling is important, but I'm not sure how it specifically benefits the Agile approach. I'll have to think this through carefully.
ST
Stephane
1 year ago
This question seems straightforward. I think the key is to identify the benefit that comes from integrating threat modeling into Agile development processes.
ED
Edelmira
1 year ago
Okay, I've got it. If we integrate threat modeling earlier in the Agile SDLC, we can address potential threats sooner rather than later. That's got to be the best approach.
LA
Larue
1 year ago
"Call Home" is definitely the right answer here. I remember learning about that in the lecture - it's IBM's automated system for detecting issues and alerting their support team. Feels like a straightforward question if you know the terminology.
EL
Elbert
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to review the WebSocket API documentation to make sure I understand the different methods for sending data to the server.
BE
Bettina
1 year ago
An up-to-date hardening guide could be useful, but I'm not sure if that's the most critical element for automating the process. I'll need to think this through carefully.
AR
Art
1 year ago
Improving user acceptance? That's a nice-to-have, but the real benefit is catching vulnerabilities early. Option D is the way to go, no doubt about it.
JU
Justa
1 year ago
Silva: That's the best way to ensure a more secure application.
SI
Silva
1 year ago
User 2: Definitely, it's better to address potential threats earlier in the SDLC.
RE
Regenia
1 year ago
User 1: I agree, catching vulnerabilities early is crucial.
SO
Sommer
1 year ago
Haha, reducing application development costs? That's a good one! Security is an investment, not a cost-saving measure. I'll go with option D.
RO
Rosalind
1 year ago
User 4: Definitely, option D seems like the best choice.
EN
Enola
1 year ago
User 3: I agree, but I think addressing potential threats earlier is key.
SH
Sharmaine
1 year ago
User 2: User acceptance is important too, though.
TA
Tamra
1 year ago
User 1: Haha, reducing application development costs? That's a good one!
KR
Kristine
1 year ago
Option B seems incorrect. Addressing threats later in the SDLC is actually a drawback, not a benefit. Threat modeling helps shift security to the left, which is the way to go.
SE
Selene
1 year ago
Yeah, it can improve the overall security of the application.
GE
German
1 year ago
I think option D is the best answer. Addressing potential threats earlier in the SDLC is a key benefit of integrating threat modeling into Agile development. This helps identify and mitigate issues before they become more costly to fix.
BA
Barney
1 year ago
User 2: Definitely, it saves time and money in the long run.
MI
Milly
1 year ago
User 1: I agree, addressing threats earlier in the SDLC is crucial.
JU
Justine
2 years ago
I agree, it helps address potential threats earlier in the SDLC.
GR
Gretchen
2 years ago
I think integrating threat modeling into Agile development is a good idea.