ASQ Updated CSQE Exam Questions and Answers by nancie

Limiting access to a software system through passwords supports the security objective of access control. Access control ensures that only authorized users can enter the system or perform specific actions based on identity, role, privilege, or permission. Passwords are one authentication mechanism used to verify identity before access is granted. An audit trail records user actions and system events, but passwords do not by themselves supply complete audit records. Preserving data integrity means protecting data from unauthorized or improper modification, which access control may support indirectly. Backup and recovery protect availability and restoration after failure or loss. Since the question specifically describes restricting system entry through passwords, the security objective being met is maintaining access control.

================

When presenting an inspection report to management, it is important to provide a summary of the inspection results. This summary should include an overview of the findings, including the number and types of defects identified, their severity, and any patterns observed. This high-level information enables management to quickly grasp the key issues and overall health of the project without delving into excessive detail. Detailed analyses and specific defect findings can be documented in supplementary materials for technical teams.

Under ISO 9001 principles, top management is accountable for the effectiveness of the quality management system. Executive management must establish quality policy, align quality objectives with organizational direction, provide resources, promote process thinking, support risk-based thinking, and ensure that the quality management system achieves intended results. A quality director may manage quality activities, audits, procedures, and reporting, but responsibility cannot be fully delegated away from executive leadership. A project manager is responsible for project execution, not the entire organizational quality management system. Software quality engineering supports compliance, measurement, verification, and improvement, but does not own ultimate accountability. Therefore, executive management is responsible for ensuring the quality management system is effective.

================

In agile development, changes to requirements are a common and expected part of the process. The product backlog, which is a prioritized list of tasks and requirements for the project, is the main tool for managing these changes.

Requirement Identification: New requirements or changes are identified during various stages of the development process, often during interactions with stakeholders or as the team gains a deeper understanding of the project.

Product Backlog: These new requirements are then added to the product backlog. The product backlog is managed by the product owner, who is responsible for maintaining its order of priority based on the project ' s goals and stakeholder feedback.

Prioritization: The product owner prioritizes the backlog items to ensure that the most valuable and important features are addressed first. This prioritization helps in managing scope and delivering value incrementally.

Sprint Planning: During sprint planning, the team selects items from the top of the product backlog to include in the next sprint, based on their capacity and the priority set by the product owner.