DOMAIN 8 - SOFTWARE
DEVELOPMENT SECURITY EXAM
QUESTIONS AND ANSWERS. VERIFIED
2025/2026.
What is the main focus of secure software development? - ANS Integrating security into the
software development process from the start.
Why are security requirements often cut from development projects? - ANS They are
typically labeled as non-functional requirements, which are often the first to go when projects
are over budget or behind schedule.
What does 'baking in security' mean? - ANS Involving security in the development project
from the very start to avoid costly retrofitting later.
What is the System Life Cycle (SLC)? - ANS The overall life of a system from cradle to grave,
including planning, designing, development, testing, operations, maintenance, and disposal.
What is the Software Development Life Cycle (SDLC)? - ANS A focus on the development
phases of a project, including planning, requirements, design, development, testing, and
deployment.
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
, What is the first phase of the SDLC? - ANS Defining a plan for the project, including goals,
objectives, and obtaining management approval.
What occurs during the requirements analysis phase? - ANS Gathering and validating
business requirements to create a detailed set of requirements.
What is produced during the architecture and design phase? - ANS Detailed system design
documents, including architecture and security controls.
What is the main activity during the development phase? - ANS Writing code to create the
system.
What characterizes the Waterfall model? - ANS Each phase is conducted sequentially without
the ability to go back to a previous phase.
How does Agile differ from Waterfall? - ANS Agile uses iterative cycles called sprints, allowing
for rapid changes and adjustments.
What is the role of a Scrum Master in Agile? - ANS A facilitator who coaches the team and
maximizes productivity without having authority over team members.
What does DevOps combine? - ANS Development, Quality Assessment (QA), and Operations
to shorten the development lifecycle.
What is SecDevOps? - ANS Integrating security into the DevOps process, requiring strong
collaboration between developers and security teams.
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
DEVELOPMENT SECURITY EXAM
QUESTIONS AND ANSWERS. VERIFIED
2025/2026.
What is the main focus of secure software development? - ANS Integrating security into the
software development process from the start.
Why are security requirements often cut from development projects? - ANS They are
typically labeled as non-functional requirements, which are often the first to go when projects
are over budget or behind schedule.
What does 'baking in security' mean? - ANS Involving security in the development project
from the very start to avoid costly retrofitting later.
What is the System Life Cycle (SLC)? - ANS The overall life of a system from cradle to grave,
including planning, designing, development, testing, operations, maintenance, and disposal.
What is the Software Development Life Cycle (SDLC)? - ANS A focus on the development
phases of a project, including planning, requirements, design, development, testing, and
deployment.
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
, What is the first phase of the SDLC? - ANS Defining a plan for the project, including goals,
objectives, and obtaining management approval.
What occurs during the requirements analysis phase? - ANS Gathering and validating
business requirements to create a detailed set of requirements.
What is produced during the architecture and design phase? - ANS Detailed system design
documents, including architecture and security controls.
What is the main activity during the development phase? - ANS Writing code to create the
system.
What characterizes the Waterfall model? - ANS Each phase is conducted sequentially without
the ability to go back to a previous phase.
How does Agile differ from Waterfall? - ANS Agile uses iterative cycles called sprints, allowing
for rapid changes and adjustments.
What is the role of a Scrum Master in Agile? - ANS A facilitator who coaches the team and
maximizes productivity without having authority over team members.
What does DevOps combine? - ANS Development, Quality Assessment (QA), and Operations
to shorten the development lifecycle.
What is SecDevOps? - ANS Integrating security into the DevOps process, requiring strong
collaboration between developers and security teams.
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
