Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSAP Exam - Topic 6 Question 64 Discussion

Posted by Lettie on Feb 08, 2023 at 07:36 PM

In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed?

Suggested Answer: B, C

1.Initiation

2.Security Certification

3.Security Accreditation

4.Continuous Monitoring

The C&A activities can be applied to an information system at appropriate phases in the system development life cycle by selectively tailoring

the various tasks and subtasks.

Answer options D and A are incorrect. Auditing and detection are not phases of the Certification and Accreditation process.


Get Premium ISSAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
40 comments · newest first
JO
Johnetta 11 months ago
Cost-benefit analysis doesn't fit this scenario.
JA
Jacki 11 months ago
Wait, are we sure about that?
AS
Ashley 12 months ago
Gap analysis is the right term here.
CH
Charlesetta 12 months ago
I thought it was requirement analysis.
CA
Carole 12 months ago
It's definitely gap analysis!
RE
Reynalda 1 year ago
I’m leaning towards gap analysis too, but I wonder if vulnerability analysis could somehow relate to missing functions?
NY
Nydia 1 year ago
Cost-benefit analysis sounds familiar, but it seems more about financial aspects rather than documenting missing functions.
EL
Eleonora 1 year ago
I remember practicing a question about requirement analysis, but I don't think that's what this one is asking.
RO
Rolland 1 year ago
I think gap analysis is the right choice here, but I'm not completely sure. It feels like it fits the description.
BE
Beth 1 year ago
Okay, let's see. The question is asking what I should request to resolve the deployment plan issue. I think the testing plan option makes the most sense, as that would help ensure the deployment goes smoothly.
AN
Andree 1 year ago
Okay, I've got this. Since all links have 1 Gbps unreserved bandwidth initially, and the least-fill feature is enabled, CSPF will choose the paths that leave the most available bandwidth on the links. I think the answer is D.
LE
Leslee 1 year ago
Ah, I think I've got this! The Java Runtime Environment is definitely one, and the EnterpriseOne Deployment Server is another. For the third, I'm pretty sure it's the EnterpriseOne Deployment Client. I feel good about this answer.
FR
Franklyn 1 year ago
Option B looks promising - assessing whether senior management is actually supporting and promoting the internal control culture described in the report. That seems like a key step to verify the effectiveness of the controls.
DE
Devorah 1 year ago
Vulnerability analysis? Haha, that's more about finding security flaws, not missing functionality. Gap analysis is the way to go!
KA
Kanisha 1 year ago
↳ replying to Devorah
A) Gap analysis
KI
King 1 year ago
↳ replying to Devorah
Vulnerability analysis? Haha, that's more about finding security flaws, not missing functionality. Gap analysis is the way to go!
JO
Josephine 1 year ago
↳ replying to Devorah
D) Vulnerability analysis
AL
Alonzo 1 year ago
↳ replying to Devorah
C) Cost-benefit analysis
NO
Nobuko 1 year ago
↳ replying to Devorah
B) Requirement analysis
IN
Ines 1 year ago
↳ replying to Devorah
A) Gap analysis
FA
Fannie 1 year ago
Cost-benefit analysis? Really? That's more about weighing the pros and cons, not figuring out what's been left out.
MA
Makeda 1 year ago
↳ replying to Fannie
D) Vulnerability analysis
LO
Loreta 1 year ago
↳ replying to Fannie
C) Cost-benefit analysis
RO
Rolande 1 year ago
↳ replying to Fannie
B) Requirement analysis
TH
Thersa 1 year ago
↳ replying to Fannie
A) Gap analysis
DO
Domingo 1 year ago
↳ replying to Fannie
D) Vulnerability analysis
DI
Dick 1 year ago
↳ replying to Fannie
C) Cost-benefit analysis
OL
Olive 1 year ago
↳ replying to Fannie
B) Requirement analysis
TA
Tammi 1 year ago
↳ replying to Fannie
A) Gap analysis
SH
Shakira 1 year ago
I'm not sure, but I think it could also be B) Requirement analysis.
CO
Corrie 1 year ago
I agree with Viki, because gap analysis helps identify missing services and functions.
SH
Shawana 1 year ago
Requirement analysis? Nah, that's more about understanding the user's needs, not the unintentional gaps in the software.
MA
Markus 1 year ago
↳ replying to Shawana
B) Requirement analysis
JO
Johnetta 1 year ago
↳ replying to Shawana
A) Gap analysis
VI
Viki 1 year ago
I think the answer is A) Gap analysis.
TA
Talia 2 years ago
I think Gap analysis is the correct answer here. It's all about identifying the missing pieces in the software development process.
AL
Alex 1 year ago
↳ replying to Talia
Vulnerability analysis is crucial for identifying security risks in the software.
DA
Davida 1 year ago
↳ replying to Talia
Cost-benefit analysis helps in determining the value of each feature.
AL
Alton 1 year ago
↳ replying to Talia
Requirement analysis is also important to ensure all necessary functions are documented.
MA
Mayra 1 year ago
↳ replying to Talia
I agree, Gap analysis is essential for identifying missing components.
0/2000 characters

Save Cancel