Practice Question · CISSP Study Group

Practice Question

Your company is adopting a DevSecOps approach for a new application that handles payment card information. During development, a developer suggests disabling input validation temporarily to accelerate integration testing. What is the BEST response from a security perspective?

A. Allow the change, provided it is reversed before production deployment.

B. Deny the request and enforce secure coding practices at all times.

C. Suggest using synthetic test data and maintain all security controls.

D. Use a separate insecure test environment to allow faster progress.

6 comments