CISA Practice Question: Information Systems Acquisition, Development, and Implementation

In a spiral SDLC model, what is the primary purpose of risk analysis in each iteration?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

To identify and resolve potential project risks early

The spiral model is risk-driven; each iteration includes a risk analysis to identify and mitigate project risks before proceeding to the next phase.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
To identify and resolve potential project risks early
Why this is correct
Risk analysis is a distinguishing feature of the spiral model, allowing iterative risk mitigation.
✗
To assess user satisfaction with the prototype
Why it's wrong here
User feedback is part of the prototyping, but risk analysis is a separate activity.
✗
To plan the next iteration's tasks
Why it's wrong here
Planning occurs after risk analysis, but the primary purpose is risk mitigation.
✗
To define detailed functional requirements
Why it's wrong here
Requirements are defined, but the spiral model's focus is on risk identification and resolution.

Go deeper