PMI-ACP Application Security & Development 5

Question 1

Which describes a 'spike' in the context of a security-related unknown?

Accepted Answer

A time-boxed investigation to reduce uncertainty, such as evaluating an authentication library

Answer

Spikes are time-boxed research activities to answer technical questions.

Question 2

A continuous delivery pipeline should fail the build when:

Accepted Answer

A critical security test fails

Answer

Automated quality gates stop unsafe changes from progressing.

Question 3

Which statement about security and the Definition of Done is most accurate?

Accepted Answer

Including security checks in the Definition of Done ensures every increment meets a baseline

Answer

A shared Definition of Done makes security part of each increment's quality bar.

Question 4

A stakeholder asks the team to skip security testing to hit a deadline. What is the best servant-leader response?

Accepted Answer

Make the risk and trade-offs transparent and negotiate scope rather than quality

Answer

Agile leaders make trade-offs visible and prefer flexing scope over compromising quality.

Question 5

Which technique helps teams quickly identify the highest security risks to address first?

Accepted Answer

Risk-based prioritization using probability and impact

Answer

Risk scoring by probability and impact guides backlog ordering.

PMI-ACP - Project Management Institute - Agile Certified Practitioner Practice Test