ISC Exam Questions

Which of the following is not a component of the second phase of the SDLC process?

Which of the following is not a component of the second phase of the SDLC process?

A.
Analyze functional requirements

B.
Perform functional and security testing

C.
Prepare initial documents for system certification and accreditation

D.
Design security architecture

Explanation:
The second SDLC phase components are outlined below:

i.Conduct the risk assessment and use the results to supplement the baseline security controls;
ii. Analyze security requirements;
iii. Perform functional and security testing;
iv. Prepare initial documents for system certification and accreditation; and
v. Design security architecture.