Mark is responsible for secure programming at his company. He wants to implement steps to validate the security of software design. At what phase in the SDLC should he implement design validation…

The correct answer is D. At every phase. Every phase of the SDLC could potentially change the design, even slightly. Therefore the security of the design must be validated. Answer option A is incorrect. Yes you would validate the design after the design phase, but this is not the only time you would validate it…

Technical Integration of Enterprise Components

Question

Mark is responsible for secure programming at his company. He wants to implement steps to validate the security of software design. At what phase in the SDLC should he implement design validation for security?

Options

AAfter the design phase
BThis is not a part of SDLC
CDuring the testing phase
DAt every phase

How the community answered

(53 responses)

A
8% (4)
B
13% (7)
C
2% (1)
D
77% (41)

Explanation

Every phase of the SDLC could potentially change the design, even slightly. Therefore the security of the design must be validated. Answer option A is incorrect. Yes you would validate the design after the design phase, but this is not the only time you would validate it. Answer option C is incorrect. Validation would occur during testing, but also during other phases. Answer option B is incorrect. Design validation should be a part of every phase of the SDLC.

Topics

#SDLC#secure design#software security#design validation

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice