CISM Certification Domain 1: Information Security Governance Video Boot Camp 2019 - Software development methodologies p

The video tutorial covers the software development lifecycle (SDLC) and its phases, emphasizing the importance of integrating security at every stage. It compares SDLC with PMI methodologies and explains the differences between projects, programs, and portfolios. The role of stakeholders and integrated product teams is discussed, along with the significance of source code management and API security. The tutorial also delves into configuration and change management, concluding with an introduction to DevOps and its relationship with Agile project management.

Which phase is NOT typically part of the Software Development Lifecycle (SDLC)?

• Implementation

• Marketing

• Design

• Testing

What is a key difference between projects and operations?

• Projects are ongoing, operations are temporary

• Projects have a defined start and end, operations are ongoing

• Projects and operations are both temporary

• Operations have a defined start and end, projects are ongoing

In project management, what is a program?

• A temporary endeavor with a fixed budget

• An ongoing operational task

• A collection of related projects

• A single project with a unique goal

Who are considered stakeholders in a project?

• Only the project manager

• Anyone affected by the project

• Only the project team members

• Only the end users

What is a key benefit of using integrated product teams?

• They reduce the need for stakeholder involvement

• They focus only on technical aspects

• They ensure a single perspective is considered

• They bring together diverse expertise for better solutions

What is the purpose of a source code escrow?

• To manage code changes during development

• To hold code in case the developer goes out of business

• To store code for open-source projects

• To provide a backup for code repositories

Why is API security important?

• APIs are only used for internal communication

• APIs can expose sensitive data if not secured

• APIs are inherently secure

• APIs do not require security measures

What is the role of a configuration control board?

• To handle customer support

• To manage project budgets

• To oversee changes in software configurations

• To develop new software features

What is a primary focus of DevOps?

• Eliminating testing phases

• Slowing down software release cycles

• Emphasizing communication and collaboration

• Isolating development and operations teams

How does DevOps differ from traditional software development?

• It only applies to large organizations

• It eliminates the need for testing

• It integrates development and operations throughout the lifecycle

• It focuses solely on development