D487 SECURE SOFTWARE DESIGN
COMPLETE QUESTIONS AND ANSWERS
GRADED A+
◉ Iterative Waterfall Development
Answer: - Each phase of a project is broken down into its own
waterfall phases
◉ Agile
Answer: - Iterative & incremental development approach that
values flexibility, customer feedback, collaboration, and
responding to change
- Tasks are broken down into small increments/iterations with
short time frames, called 'time boxes' lasting 1-4 weeks
- Cross-functional, self-organizing teams
◉ Scrum
Answer: - Agile framework that organizes work into sprints and
defines roles, events, and artifacts
- Sprint: lasts from 1 week to one month, is time boxed
, - Product Backlog: prioritized list of requirements
- Daily Scrum: team briefly coordinates progress, plans, and
blockers during the sprint
- Sprint Planning: team selects sprint work and plans how to
complete it
- Sprint Retrospective: event focused on improving how the team
works in future sprints
- Sprint Review: event used to inspect completed work with
stakeholders and gather feedback
- Product Owner: Scrum role responsible for product value,
stakeholder needs, and prioritizing the product backlog
- Scrum Master: Scrum role that facilitates Scrum, removes
impediments, and helps the team follow the process
- Software Developer: Role that writes code, implements features,
participates in Scrum events, and applies secure coding practices
◉ SDL Phases
Answer: A1: Security Assessment
COMPLETE QUESTIONS AND ANSWERS
GRADED A+
◉ Iterative Waterfall Development
Answer: - Each phase of a project is broken down into its own
waterfall phases
◉ Agile
Answer: - Iterative & incremental development approach that
values flexibility, customer feedback, collaboration, and
responding to change
- Tasks are broken down into small increments/iterations with
short time frames, called 'time boxes' lasting 1-4 weeks
- Cross-functional, self-organizing teams
◉ Scrum
Answer: - Agile framework that organizes work into sprints and
defines roles, events, and artifacts
- Sprint: lasts from 1 week to one month, is time boxed
, - Product Backlog: prioritized list of requirements
- Daily Scrum: team briefly coordinates progress, plans, and
blockers during the sprint
- Sprint Planning: team selects sprint work and plans how to
complete it
- Sprint Retrospective: event focused on improving how the team
works in future sprints
- Sprint Review: event used to inspect completed work with
stakeholders and gather feedback
- Product Owner: Scrum role responsible for product value,
stakeholder needs, and prioritizing the product backlog
- Scrum Master: Scrum role that facilitates Scrum, removes
impediments, and helps the team follow the process
- Software Developer: Role that writes code, implements features,
participates in Scrum events, and applies secure coding practices
◉ SDL Phases
Answer: A1: Security Assessment
