MENU
Which of the following SDLC phases consists of the given security controls. Misuse Case Modeling Security Design and Architecture Review Threat and Risk Modeling Security Requirements and Test Cases Generation
Suggested Answer: B, D
Get Premium ISSMP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.
The Clark-Wilson security model provides a foundation for specifying and analyzing an integrity policy for a computing system.
Answer option C is incorrect. The Bell-LaPadula access control model is mainly used in military systems.
Answer option A is incorrect. There is no such access control model as Clark-Biba.
36 comments · newest first
RI
Rikki
10 months ago
Yeah, I've seen it mostly tied to Design too.
RY
Ryann
11 months ago
Wait, are we sure about that? Sounds a bit off.
HO
Howard
11 months ago
Agreed, Design is where all that security stuff happens.
BR
Brice
11 months ago
I think it's actually in Requirements Gathering.
AN
Anisha
11 months ago
Definitely the Design phase!
ME
Merrilee
12 months ago
I definitely recall that Misuse Case Modeling is tied to design, but I’m not confident about the others.
GL
Glendora
12 months ago
I'm a bit confused; could it also be part of the requirements gathering phase? I feel like some of those controls might fit there too.
ED
Eden
12 months ago
I remember practicing a question similar to this, and I think the design phase is where you would typically address security requirements.
AN
An
1 year ago
I think the security controls mentioned are mostly related to the design phase, but I'm not entirely sure.
DA
Dante
1 year ago
Okay, I've got a strategy. I'll go through each answer choice and see which one best fits the security controls listed. Methodical approach is key for these types of questions.
KI
Kimi
1 year ago
I'm a bit confused on this one. The security controls seem to span multiple SDLC phases, so I'm not sure if there's a single clear-cut answer. I'll need to think it through step-by-step.
NE
Nelida
1 year ago
Ah, I think I've got it. The security controls mentioned are all part of the design phase, so the answer must be A. Gotta love those security-focused SDLC questions!
CO
Cory
1 year ago
Hmm, the security controls listed seem to align with the requirements gathering and design phases. I'm leaning towards A or D, but I'll double-check my understanding.
JO
Joesph
1 year ago
This looks like a tricky one. I'll need to carefully review the SDLC phases and security controls to determine the right answer.
ST
Stefan
1 year ago
I'm a little confused on this one. I know the Toyota Production System has some key principles, but I can't recall the exact two pillars off the top of my head. I'll have to review my notes and make an educated guess.
IR
Irving
1 year ago
I recall something about traditional budgeting perpetuating inefficiencies, which makes option B seem likely as a benefit of switching to activity based budgeting.
KI
King
1 year ago
I feel like we practiced a question similar to this before, where "Type" could also be modified. It's tricky!
BO
Bobbye
1 year ago
I dunno, I'm leaning towards A. Design seems like the obvious choice for security controls, doesn't it? Though I could be way off base here.
RE
Ressie
1 year ago
Haha, I bet the security team wishes they could just 'Deploy' security and call it a day. But nope, gotta start at the beginning with requirements.
CY
Cyndy
1 year ago
D) Requirements Gathering
SA
Sang
1 year ago
C) Deployment
OR
Orville
1 year ago
A) Design
LA
Launa
1 year ago
Definitely D. Security requirements and test cases are all about the initial requirements gathering phase, right?
LE
Lera
1 year ago
That's right. It's important to gather security requirements early on in the SDLC process.
CR
Cristy
1 year ago
Yes, you're correct. Security requirements and test cases are indeed part of the requirements gathering phase.
MA
Marsha
1 year ago
D) Requirements Gathering
LA
Launa
1 year ago
C) Deployment
SH
Shonda
1 year ago
B) Maintenance
DA
Daron
1 year ago
A) Design
IS
Isabella
1 year ago
Hmm, this looks like a tricky one. I think the answer might be D, but I'm not totally sure.
MI
Misty
1 year ago
User 3: Yeah, I think D doesn't quite fit with the given security controls.
TE
Teddy
1 year ago
User 2: I agree, it seems like the security controls align with the Design phase.
JI
Jimmie
1 year ago
User 1: I think the answer is A) Design.
DE
Denae
2 years ago
I'm not sure, but I think it makes sense that security controls would be part of the Design phase.
CA
Cammy
2 years ago
I agree with Elsa, Design phase is where security controls are implemented.
EL
Elsa
2 years ago
I think the answer is Design because it involves security controls.