Certified Development Lifecycle and Deployment Designer

By Salesforce · Question Mode

QuestionQ28

VerifiedRisk Identification and Mitigation

Universal Containers (UC) has decided to improve the quality of work performed by its development teams. As part of this effort, UC has acquired code-review software licenses to help developers improve code quality.

Which two recommended practices should be followed when conducting secure code reviews?

Choose two
Explanation

A code-review checklist promotes consistent coverage across reviews and reviewers. Secure review is most effective when automated analysis is combined with human review: tools can detect known patterns and common vulnerabilities, while human reviewers supply contextual judgment and can identify issues that automated checks miss. Salesforce guidance recommends using a checklist alongside code-analysis tools and notes that automated checks alone cannot find every security vulnerability.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!