In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed?
Answer(s): A
Gap analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed.Gap analysis is a tool that helps a company to compare its actual performance with its potential performance. It is a formal study of what a business is doing currently and where it wants to go in the future. Gap analysis provides a foundation for measuring investment of time, money and human resources required to achieve a particular outcome. The goal of gap analysis is to identify the gap between the optimized allocation and integration of the inputs, and the current level of allocation. This helps provide the company with insight into areas, which could be improved. The gap analysis process involves determining, documenting and approving the variance between business requirements and current capabilities. Answer option D is incorrect. Vulnerability analysis is also known as vulnerability assessment. It is a process that defines systematic examination of a critical infrastructure, identifies and classifies the security vulnerabilities in a computer, network, or communications infrastructure. In addition, vulnerability analysis forecasts the effectiveness of proposed countermeasures, identifies the security deficiencies, evaluates the security alternatives, and verifies the adequacy of such measures after implementation.Answer option C is incorrect. A cost benefit analysis is a technique related to the cost effectiveness of different alternatives in order to see whether the benefits outweigh the costs. Its aim is to gauge the efficiency of the intervention relative to the status quo.To implement cost-effective controls and allocate resources, organizations, after identifying all likely controls and evaluating their feasibility and usefulness, must conduct a cost-benenifit analysis. This process must be conducted for each new or enhanced control to determine if the control recommended is appropriate for the organization. A cost benenifit analysis mainly determines the impact of implementing the new or enhanced control and then determines the impact of not implementing the control. Answer option B is incorrect. The requirements analysis processes are a collection of processes that work together to define the stakeholder requirements, the solution to satisfy the stakeholder, and a definition of the solution in enough detail that the solution components can be constructed.
Which of the following processes identifies the threats that can impact the business continuity of operations?
Answer(s): C
A business impact analysis (BIA) is a crisis management and business impact analysis technique that identifies those threats that can impact the business continuity of operations. Such threats can be either natural or man-made. The BIA team should have a clear understanding of the organization, key business processes, and IT resources for assessing the risks associated with continuity. In the BIA team, there should be senior management, IT personnel, and end users to identify all resources that are to be used during normal operations.Answer option B is incorrect. Risk analysis is the science of risks and their probability and evaluation in a business or a process. It is an important factor in security enhancement and prevention in a system. Risk analysis should be performed as part of the risk management process for each project. The outcome of the risk analysis would be the creation or review of the risk register to identify and quantify risk elements to the project and their potential impact.Answer option A is incorrect. The functional analysis process is used for converting system requirements into a comprehensive function standard. Verification is the result of the functional analysis process, in which the fundamentals of a system level functional architecture are defined adequately to allow for synthesis in the design phase. The functional analysis breaks down the higher-level functions into the lower level functions.Answer option D is incorrect. Requirements analysis encompasses the tasks that go into determining the needs or conditions to meet for a new or altered product, taking account of the possibly conflicting requirements of the various stakeholders.
What are the benefits of using AAA security service in a network? Each correct answer represents a part of the solution. Choose all that apply.
Answer(s): A,C,D
The benefits of using AAA are as follows:It increases flexibility and control of access configuration.It provides scalability.It supports standardized authentication methods, such as RADIUS, TACACS+, and Kerberos.It supports multiple backup systems.
In which of the following SDLC phases are the software and other components of the system faithfully incorporated into the design specifications?
In the programming and training phase, the software and other components of the system are faithfully incorporated into the design specifications. Proper documentation and training are provided in this phase. Answer option D is incorrect. In the initiation phase, the need for a system is expressed and the purpose of the system is documented.Answer option C is incorrect. In the definition phase, users' needs are defined and the needs are translated into requirements statements that incorporate appropriate controls.Answer option B is incorrect. In the evaluation and acceptance phase, system is validated and system meets all user and control requirements.
Arrange the components according to their respective OSI layers.
Switching and filtering, based on MAC addresses, are performed at layer 2 of the OSI model.Packets are created and routing is done based on IP addresses at layer 3 of the OSI model. UDP, windowing, and segments are created at layer 4 of the OSI model.
Post your Comments and Discuss ISC2 ISSAP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ISSAP content, but please register or login to continue.