ISC2 Exam ISSAP Topic 6 Question 64 Discussion

Actual exam question for ISC2's ISSAP exam

Question #: 64
Topic #: 6

In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed?

AGap analysis

BRequirement analysis

CCost-benefit analysis

DVulnerability analysis

Show Suggested Answer

Suggested Answer: B, C

1.Initiation

2.Security Certification

3.Security Accreditation

4.Continuous Monitoring

The C&A activities can be applied to an information system at appropriate phases in the system development life cycle by selectively tailoring

the various tasks and subtasks.

Answer options D and A are incorrect. Auditing and detection are not phases of the Certification and Accreditation process.

by Lettie at Feb 08, 2023, 07:36 PM

Limited Time Offer

25%

16 days ago

I think Gap analysis is the correct answer here. It's all about identifying the missing pieces in the software development process.

upvoted 0 times

Alton

Requirement analysis is also important to ensure all necessary functions are documented.

upvoted 0 times

...

Mayra

2 days ago

I agree, Gap analysis is essential for identifying missing components.

upvoted 0 times

...