A Security Professional Recommends That a Company Integrate Threat Modeling

question 283

Multiple Choice

A security professional recommends that a company integrate threat modeling into its Agile development processes. Which of the following BEST describes the benefits of this approach?

• A) Reduce application development costs.
• B) Potential threats are addressed later in the Software Development Life Cycle (SDLC).
• C) Improve user acceptance of implemented security controls.
• D) Potential threats are addressed earlier in the Software Development Life Cycle (SDLC).

---

Definitions:

Hurdle Rate

The minimum rate of return on a project or investment required by a manager or investor.

Payback Method

An investment appraisal technique that calculates the amount of time required for an investment to generate cash flows sufficient to recover its initial cost.

Cash Inflows

Money or equivalent value received by a business, often from operations, investments, or financing activities.

Discounting

The process of determining the present value of a future amount of money or stream of income.