ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
During sprint planning for a two-week Agile iteration, the Scrum team wants to ensure that security objectives are treated on par with functional features. Which approach most effectively weaves security work into the standard sprint workflow?
Insert a security hardening sprint after every release to remediate all identified vulnerabilities at once.
Perform an organization-wide penetration test at the end of the project and log findings as defects.
Instruct developers to review secure coding guidelines during onboarding and rely on ad-hoc checks during coding.
Write dedicated security user stories with clear acceptance criteria and prioritize them in the product backlog alongside functional stories.
Creating dedicated security-focused user stories (sometimes called "abuse" or "misuse" stories) with explicit, testable acceptance criteria puts security requirements in the same backlog and prioritization process as functional stories. Because they are estimated, committed, and demonstrated within the sprint, the team continuously delivers security value without relying on end-of-cycle fixes. A separate hardening sprint, a late-stage penetration test, or ad-hoc guideline reviews all defer or irregularly address security concerns, contradicting the DevSecOps goal of integrating security into every iteration.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are security user stories and how do they differ from functional user stories?
Open an interactive chat with Bash
Why is a dedicated hardening sprint not an effective practice for addressing security concerns?
Open an interactive chat with Bash
What is the role of acceptance criteria in dedicated security user stories?
Open an interactive chat with Bash
What are security user stories in Agile?
Open an interactive chat with Bash
How does DevSecOps integrate security into Agile workflows?
Open an interactive chat with Bash
Why are late-stage security measures like hardening sprints less effective?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Lifecycle Management
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .