CAS-003 · Question #292
CAS-003 Question #292: Real Exam Question with Answer & Explanation
The correct answer is D: Implement unit tests that incorporate static code analyzers. Implementing unit tests that incorporate static code analyzers is the best complementary control for an agile development environment. Static code analyzers automatically scan source code for known vulnerability patterns (e.g., SQL injection, buffer overflows, insecure API usage)
Question
Options
- AConduct a penetration test on each function as it is developed
- BDevelop a set of basic checks for common coding errors
- CAdopt a waterfall method of software development
- DImplement unit tests that incorporate static code analyzers
Explanation
Implementing unit tests that incorporate static code analyzers is the best complementary control for an agile development environment. Static code analyzers automatically scan source code for known vulnerability patterns (e.g., SQL injection, buffer overflows, insecure API usage) as code is written, giving developers immediate feedback. This integrates naturally into agile CI/CD pipelines. Option A (penetration testing per function) is impractical in agile sprints due to time and cost. Option B (basic checks) is less thorough and not automated. Option C (switching to waterfall) abandons the agile methodology and does not inherently fix the vulnerability problem - it changes process cadence, not code quality controls.
Community Discussion
No community discussion yet for this question.