Certified Information Systems Security Professional (CISSP) — Question 312

A security engineer is required to integrate security into a software project that is implemented by small groups that quickly, continuously, and independently develop, test, and deploy code to the cloud. The engineer will MOST likely integrate with which software development process?

Answer options

• A. Devops Integrated Product Team (IPT)
• B. Structured Waterfall Programming Development
• C. Service-oriented architecture (SOA)
• D. Spiral Methodology

Correct answer: A

Explanation

The correct answer is A, as DevOps emphasizes collaboration and integration of security practices within agile development processes. The other options, such as Structured Waterfall Programming and Spiral Methodology, are less conducive to the rapid, flexible deployment needs of cloud-based applications.