Secure Software Lifecycle Professional – CSSLP – Question164

What are the various phases of the Software Assurance Acquisition process according to the U.S. Department of Defense (DoD) and Department of Homeland Security (DHS) Acquisition and Outsourcing Working Group?

A. Implementing, contracting, auditing, monitoring
B. Requirements, planning, monitoring, auditing
C. Planning, contracting, monitoring and acceptance, follow-on
D. Designing, implementing, contracting, monitoring

Correct Answer: C

Explanation:

Explanation: Software Assurance Acquisition process defines the level of confidence that software is free from vulnerabilities. It is designed into the software or accidentally inserted at anytime during its lifecycle, and the software works in a planned manner. According to the U.S. Department of Defense and Department of Homeland Security Acquisition and Outsourcing Working Group, the Software Assurance Acquisition process contains the following phases: 1.Planning 2.Contracting 3.Monitoring and acceptance 4.Follow-on