An organization has implemented an Agile development process for front end web application development. A new security architect has just joined the company and wants to integrate security…

Question

Options

• AStatic and dynamic analysis is run as part of integration
• BSecurity standards and training is performed as part of the project
• CDaily stand-up meetings are held to ensure security requirements are understood
• DFor each major iteration penetration testing is performed
• ESecurity requirements are story boarded and make it into the build
• FA security design is performed at the end of the requirements phase

• A
  76% (29)
• B
  3% (1)
• C
  13% (5)
• E
  3% (1)
• F
  5% (2)

Explanation

SDLC stands for systems development life cycle. An agile project is completed in small sections called iterations. Each iteration is reviewed and critiqued by the project team. Insights gained from the critique of an iteration are used to determine what the next step should be in the project. Each project iteration is typically scheduled to be completed within two weeks. Static and dynamic security analysis should be performed throughout the project. Static program analysis is the analysis of computer software that is performed without actually executing programs (analysis performed on executing programs is known as dynamic analysis). In most cases the analysis is performed on some version of the source code, and in the other cases, some form of the object code. For each major iteration penetration testing is performed. The output of a major iteration will be a functioning part of the application. This should be penetration tested to ensure security of the

No community discussion yet for this question.