Exam SSCP topic 2 question 14 discussion

Actual exam question from ISC's SSCP

Question #: 14
Topic #: 2

[All SSCP Questions]

The security of a computer application is most effective and economical in which of the following cases?

A. The system is optimized prior to the addition of security.
B. The system is procured off-the-shelf.
C. The system is customized to meet the specific security threat.
D. The system is originally designed to provide the necessary security.

Show Suggested Answer

Suggested Answer: D 🗳️
The earlier in the process that security is planned for and implement the cheaper it is. It is also much more efficient if security is addressed in each phase of the development cycle rather than an add-on because it gets more complicated to add at the end. If security plan is developed at the beginning it ensures that security won't be overlooked.
The following answers are incorrect:
The system is optimized prior to the addition of security. Is incorrect because if you wait to implement security after a system is completed the cost of adding security increases dramtically and can become much more complex.
The system is procured off-the-shelf. Is incorrect because it is often difficult to add security to off-the shelf systems.
The system is customized to meet the specific security threat. Is incorrect because this is a distractor. This implies only a single threat.

by xymavu at April 4, 2025, 11:05 p.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!