Ridgeline Grid’s product owner writes a story: “the operator dashboard shows live substation status.” During backlog refinement, the security lead adds a separate note: “the dashboard must encrypt data at rest and enforce role-based access.” A new team member asks why the security note wasn’t just folded into the original story instead of being tracked as something extra. What’s the risk in doing that?

Ridgeline Grid is scoping availability for three different systems: the internal maintenance-scheduling tool (used only during normal business hours), the customer outage-reporting portal (used by the public around the clock, but scheduled maintenance windows are acceptable), and the substation safety-interlock system (which must never stop operating, planned or unplanned, for any reason). Which availability level does each require?

Ridgeline Grid’s security team and its operations team are drafting the substation dashboard’s requirements separately, and both claim “availability” as their own requirement. Security frames it as one leg of the confidentiality-integrity-availability triad they’re responsible for; operations frames it as scheduling when users can access the dashboard. A junior analyst is told to pick one team’s framing and drop the requirement from the other’s document. Is that the right call?

A Ridgeline Grid field device’s circuit board is encapsulated in a hardened epoxy potting compound, so that physically desoldering or probing the chip holding its cryptographic keys destroys the chip’s readable state before any key material can be extracted. Which subordinate quality attribute and tolerance does this design choice most directly exemplify?

A Ridgeline Grid substation replaces its single weather sensor with four sensor types — a thermometer, a barometric sensor, a humidity sensor, and a wind gauge — and fuses their readings so the system can keep classifying conditions accurately even when fog rolls in and visibility-dependent readings degrade. Which named tolerance does this illustrate?

Ridgeline Grid’s development team adds strict input validation to its operator console to block injection attacks against the substation command queue. In the sprint review, the team lead reports this work under the heading “resilience improvements.” A reviewer pushes back on the categorization — not on the work itself, which everyone agrees was worth doing. What’s the basis for that objection?

Ridgeline Grid’s platform team adds a control that automatically reroutes substation traffic away from a node reporting anomalous readings. In the retro, one engineer files it under “cybersecurity work,” another files it under “capacity work,” and a third insists it can only be filed under one or the other. Who has the right read?

A Ridgeline Grid substation loses its primary network link to the regional control center during a fiber outage. Rather than failing outright, the substation buffers its telemetry locally and switches to a cellular backup link, resuming full reporting once the fiber is restored. Which named tolerance does this illustrate, and under which subordinate attribute?

Ridgeline Grid’s substation-alerting module has a single class responsible for validating sensor readings, formatting alert messages, sending emails, logging to disk, and updating the operator dashboard — five distinct responsibilities in one class, each usable independently by only a small part of the module. A new developer is asked to reuse just the email-sending logic elsewhere in the codebase and finds it painful to extract cleanly. Which of the following are genuine consequences of this kind of design? (Select all that apply.)

Ridgeline Grid’s original substation-monitoring software has a hard-coded limit of 200 simultaneous sensor connections, written directly into the source code. As the company adds substations, operators now have to file a change request and wait for a code change and redeploy every time the limit needs raising. A capacity-planning consultant recommends externalizing that limit into a configuration file operators can edit directly. What NFR-driven technique does this recommendation illustrate?