CAS-003 · Question #523
A software development company lost customers recently because of a large number of software issues. These issues were related to integrity and availability defects, including buffer overflows…
The correct answer is B. Continuous integration D. Static analysis tools. Code obfuscation just makes it hard to reverse engineer the source code but does little to solve the issue of fixing software bugs during the SDLC. From a security perspective, static analysis tools and Continuous Integration (CI) allows security analysis to be integrated into…
Question
A software development company lost customers recently because of a large number of software issues. These issues were related to integrity and availability defects, including buffer overflows, pointer deferences, and others. Which of the following should the company implement to improve code quality? (Select two).
Options
- ADevelopment environment access controls
- BContinuous integration
- CCode comments and documentation
- DStatic analysis tools
- EApplication containerization
- FCode obfuscation
How the community answered
(34 responses)- A3% (1)
- B82% (28)
- C9% (3)
- E3% (1)
- F3% (1)
Explanation
Code obfuscation just makes it hard to reverse engineer the source code but does little to solve the issue of fixing software bugs during the SDLC. From a security perspective, static analysis tools and Continuous Integration (CI) allows security analysis to be integrated into the SDLC, leading to more secure software.
Topics
Community Discussion
No community discussion yet for this question.