In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed?
Suggested Answer: B, C
Get Premium ISSAP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
1.Initiation
2.Security Certification
3.Security Accreditation
4.Continuous Monitoring
The C&A activities can be applied to an information system at appropriate phases in the system development life cycle by selectively tailoring
the various tasks and subtasks.
Answer options D and A are incorrect. Auditing and detection are not phases of the Certification and Accreditation process.
40 comments · newest first
JO
Johnetta
11 months ago
Cost-benefit analysis doesn't fit this scenario.
JA
Jacki
11 months ago
Wait, are we sure about that?
AS
Ashley
12 months ago
Gap analysis is the right term here.
CH
Charlesetta
12 months ago
I thought it was requirement analysis.
CA
Carole
12 months ago
It's definitely gap analysis!
RE
Reynalda
1 year ago
I’m leaning towards gap analysis too, but I wonder if vulnerability analysis could somehow relate to missing functions?
NY
Nydia
1 year ago
Cost-benefit analysis sounds familiar, but it seems more about financial aspects rather than documenting missing functions.
EL
Eleonora
1 year ago
I remember practicing a question about requirement analysis, but I don't think that's what this one is asking.
RO
Rolland
1 year ago
I think gap analysis is the right choice here, but I'm not completely sure. It feels like it fits the description.
BE
Beth
1 year ago
Okay, let's see. The question is asking what I should request to resolve the deployment plan issue. I think the testing plan option makes the most sense, as that would help ensure the deployment goes smoothly.
AN
Andree
1 year ago
Okay, I've got this. Since all links have 1 Gbps unreserved bandwidth initially, and the least-fill feature is enabled, CSPF will choose the paths that leave the most available bandwidth on the links. I think the answer is D.
LE
Leslee
1 year ago
Ah, I think I've got this! The Java Runtime Environment is definitely one, and the EnterpriseOne Deployment Server is another. For the third, I'm pretty sure it's the EnterpriseOne Deployment Client. I feel good about this answer.
FR
Franklyn
1 year ago
Option B looks promising - assessing whether senior management is actually supporting and promoting the internal control culture described in the report. That seems like a key step to verify the effectiveness of the controls.
DE
Devorah
1 year ago
Vulnerability analysis? Haha, that's more about finding security flaws, not missing functionality. Gap analysis is the way to go!
KA
Kanisha
1 year ago
A) Gap analysis
KI
King
1 year ago
Vulnerability analysis? Haha, that's more about finding security flaws, not missing functionality. Gap analysis is the way to go!
JO
Josephine
1 year ago
D) Vulnerability analysis
AL
Alonzo
1 year ago
C) Cost-benefit analysis
NO
Nobuko
1 year ago
B) Requirement analysis
IN
Ines
1 year ago
A) Gap analysis
FA
Fannie
1 year ago
Cost-benefit analysis? Really? That's more about weighing the pros and cons, not figuring out what's been left out.
MA
Makeda
1 year ago
D) Vulnerability analysis
LO
Loreta
1 year ago
C) Cost-benefit analysis
RO
Rolande
1 year ago
B) Requirement analysis
TH
Thersa
1 year ago
A) Gap analysis
DO
Domingo
1 year ago
D) Vulnerability analysis
DI
Dick
1 year ago
C) Cost-benefit analysis
OL
Olive
1 year ago
B) Requirement analysis
TA
Tammi
1 year ago
A) Gap analysis
SH
Shakira
1 year ago
I'm not sure, but I think it could also be B) Requirement analysis.
CO
Corrie
1 year ago
I agree with Viki, because gap analysis helps identify missing services and functions.
SH
Shawana
1 year ago
Requirement analysis? Nah, that's more about understanding the user's needs, not the unintentional gaps in the software.
MA
Markus
1 year ago
B) Requirement analysis
JO
Johnetta
1 year ago
A) Gap analysis
VI
Viki
1 year ago
I think the answer is A) Gap analysis.
TA
Talia
2 years ago
I think Gap analysis is the correct answer here. It's all about identifying the missing pieces in the software development process.
AL
Alex
1 year ago
Vulnerability analysis is crucial for identifying security risks in the software.
DA
Davida
1 year ago
Cost-benefit analysis helps in determining the value of each feature.
AL
Alton
1 year ago
Requirement analysis is also important to ensure all necessary functions are documented.
MA
Mayra
1 year ago
I agree, Gap analysis is essential for identifying missing components.