CASP+: Software Development Models Quiz

Which software development model is best suited for projects with long completion timeframes?

• SecDevOps

• Spiral Method

• Waterfall Model

• Agile Model

Which software development model uses iterative processes to release well-tested code in smaller blocks or units?

• Waterfall Model

• Spiral Method

• Agile Model

• SecDevOps

Which software development model focuses on adaptive measures in various phases and breaks up tasks incrementally?

• SecDevOps

• Agile Model

• Spiral Method

• Waterfall Model

Which software development model is particularly useful in complex, unstable systems whose requirements and design are not easy to predict?

• Waterfall Model

• Spiral Method

• Agile Model

• SecDevOps

Which software development model introduces security at the forefront of development efforts?

• Waterfall Model

• Spiral Method

• Agile Model

• SecDevOps

Which essential element of SecDevOps involves using automated methods to introduce static code analysis testing and dynamic application testing?

• Security as Code (SaC)

• Infrastructure as Code (IaC)

• Continuous Deployment (CD)

• Continuous Integration (CI)

Which essential element of SecDevOps involves leveraging configuration management tools to control changes to infrastructure?

• Continuous Deployment (CD)

• Infrastructure as Code (IaC)

• Continuous Integration (CI)

• Security as Code (SaC)

What is the risk associated with the rapid development focus of the Agile model?

• High cost and complexity

• Lack of stakeholder involvement

• Slow progress and lack of innovation

• Introduction of new, untested functionality and vulnerabilities

What is the main advantage of the Spiral Method for software development?

• Long-term planning

• Risk analysis at each iterative step

• Rapid deployment of code

• Sequential execution of phases

What is the main disadvantage of the Waterfall Model for software development?

• Lack of stakeholder feedback

• Short completion timeframes

• Rigidity and inability to adapt to changing security needs

• Overlap of phases