CAS-001 · Question #364
Which of the following security practices are included in the Implementation phase of the Security Development Lifecycle (SDL)? Each correct answer represents a complete solution. Choose two.
The correct answer is A. Establish Design Requirements B. Perform Static Analysis C. Use Approved Tools. Note: The question states 'Choose two' but the listed answer shows A, B, C-this appears to be an error in the question. In Microsoft's Security Development Lifecycle (SDL), the Implementation phase focuses on secure coding practices and includes: (B) Perform Static…
Question
Which of the following security practices are included in the Implementation phase of the Security Development Lifecycle (SDL)? Each correct answer represents a complete solution. Choose two.
Options
- AEstablish Design Requirements
- BPerform Static Analysis
- CUse Approved Tools
- DExecute Incident Response Plan
How the community answered
(42 responses)- A86% (36)
- D14% (6)
Explanation
Note: The question states 'Choose two' but the listed answer shows A, B, C-this appears to be an error in the question. In Microsoft's Security Development Lifecycle (SDL), the Implementation phase focuses on secure coding practices and includes: (B) Perform Static Analysis-automated scanning of source code for security defects during development, and (C) Use Approved Tools-requiring developers to use vetted compilers, linkers, and security analysis tools with safe settings. Option A (Establish Design Requirements) belongs to the Requirements and Design phase, which precedes Implementation. Option D (Execute Incident Response Plan) belongs to the Response phase. The correct answers for the Implementation phase are B and C.
Topics
Community Discussion
No community discussion yet for this question.