Professional Scrum Master I (PSM I) — Question 84

What are two good ways for a Scrum Team to ensure security concerns are satisfied? (Choose two.)

Answer options

• A. Postpone the work until a specialist can perform a security audit and create a list of security-related Product Backlog items.
• B. Add security concerns to the definition of ג€Doneג€.
• C. Add a Sprint to specifically resolve all security concerns.
• D. Delegate the work to the concerned department.
• E. Have the Scrum Team create Product Backlog items for each concern.

Correct answer: B, E

Explanation

Option B is correct since adding security concerns to the definition of 'Done' ensures they are always considered during development. Option E is also valid as it involves explicitly addressing each security issue through Product Backlog items. Options A, C, and D are ineffective as they either postpone action, create unnecessary separate efforts, or delegate responsibility away from the Scrum Team.