CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ207

VerifiedSystems Security Implementation, Verification and Validation

Which of the following security controls would you use during the deployment phase of the SDLC to build secure software? Each correct answer represents a complete solution. Choose all that apply.

Choose three
Explanation

During deployment, security certification and accreditation provides formal security evaluation and authorization, vulnerability assessment and penetration testing identifies exploitable weaknesses before release, and change and configuration control preserves the approved secure baseline. These controls collectively validate, authorize, and maintain the security of the deployed software.

Community Discussion

No comments yet. Be the first to start the discussion!