CISSP Practice Question – Software Development Security
A development team is adopting a secure software development lifecycle (SDLC). The security manager wants to ensure that vulnerabilities are identified before code is executed, but also wants to minimize cost and disruption to developers.
Which of the following activities BEST meets this requirement?
A. Static application security testing (SAST)
B. Dynamic application security testing (DAST)
C. Fuzz testing
D. Penetration testing
3
17 comments
Vincent Primiani
7
CISSP Practice Question – Software Development Security
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by