QuestionQ94Verified/Cloud AuditingCopy linkReport a problemAsk AstroTutorSave questionWhich of the following would be the MOST critical finding in an application security and DevOps audit?ACertifications with global security standards specific to cloud are not reviewed, and the impact of noted findings are not assessed.BOutsourced cloud service interruption, breach, or loss of stored data occurred at the cloud service provider.CThe organization is not using a unified framework to integrate cloud compliance with regulatory requirements.DApplication architecture and configurations did not consider security measures.Show AnswerAnswerExplanationFailing to consider security in application architecture and configurations can introduce systemic vulnerabilities throughout the application lifecycle. Secure development requires security risks to be addressed in software design and configurations. (pages.nist.gov)Learn moreNIST: Mapping SSDF to the DevSecOps Reference ModelShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion