CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ166

VerifiedSoftware Development Security

A software engineer relies on automated tools to review application code and look for application flaws, back doors, or other malicious code. During which FIRST Software Development Life Cycle (SDLC) phase does this occur?

Explanation

Automated source-code analysis and code review are development activities used to identify vulnerabilities and malicious content early enough for developers to remediate them before release. NIST’s Secure Software Development Framework includes automated code analysis and peer review as practices for finding vulnerabilities and backdoors in code.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!