Which lifecycle model is iterative and emphasizes risk analysis during each phase?

• A. Waterfall
• B. Agile
• C. DevSecOps/SecDevOps
• D. Spiral

Answer: (D)

The idea being tested is risk-driven iteration in a software development lifecycle. The Spiral model is designed to be iterative, with each loop around the spiral representing a phase where you set objectives, identify and analyze risks, and then design and implement a plan to address those risks. After each cycle, you evaluate what was learned and decide what to do next, refining requirements and reducing uncertainty as you proceed. Because risk analysis is embedded in every cycle, this approach continuously focuses on mitigating uncertainties before moving forward, which is why it’s described as risk-driven and iterative. Waterfall follows a fixed, linear sequence with little emphasis on revisiting risks each phase. Agile is iterative and incremental but doesn’t center every cycle on formal risk analysis. DevSecOps/SecDevOps describes security-focused practices within modern DevOps, not a lifecycle model that emphasizes risk analysis in each phase.