300-745 · Question #21
A company has been facing recurring issues with SQL injection vulnerabilities affecting the products, leading to significant disruptions for customers. To address the security concerns proactively…
The correct answer is A. Static Application Security Testing tools, such as Checkmarx, Fortify, SonarQube. Static Application Security Testing (SAST) tools analyze source code during the development and build phases of the CI/CD pipeline. They can identify coding flaws such as SQL injection vulnerabilities early, allowing developers to fix issues before deployment.
Question
A company has been facing recurring issues with SQL injection vulnerabilities affecting the products, leading to significant disruptions for customers. To address the security concerns proactively, the company wants to integrate a tool into the CI/CD pipeline. The tool must be capable of identifying vulnerabilities such as SQL injection early in the development process, which allows developers to rectify issues before the code is deployed. Which solution must be implemented to meet the requirement?
Options
- AStatic Application Security Testing tools, such as Checkmarx, Fortify, SonarQube
- Bbuild log observability tools, such as Splunk, Datadog
- Cworkflow automation tools, such as GitHub Actions, Azure
- DDynamic Application Security Testing tools, such as OWASP ZAP, Veracode, Burp Suite
How the community answered
(53 responses)- A81% (43)
- B4% (2)
- C11% (6)
- D4% (2)
Explanation
Static Application Security Testing (SAST) tools analyze source code during the development and build phases of the CI/CD pipeline. They can identify coding flaws such as SQL injection vulnerabilities early, allowing developers to fix issues before deployment.
Topics
Community Discussion
No community discussion yet for this question.