nerdexam
CompTIA

CAS-005 · Question #17

A software engineer is creating a CI/CD pipeline to support the development of a web application. The DevSecOps team is required to identify syntax errors. Which of the following is the most…

The correct answer is A. Static application security testing. Static Application Security Testing (SAST) analyzes source code, bytecode, or binaries without executing the program, making it highly relevant for identifying syntax errors during the development process. This approach is ideal for the DevSecOps team's task of identifying…

Submitted by layla.eg· Mar 6, 2026Security Engineering

Question

A software engineer is creating a CI/CD pipeline to support the development of a web application. The DevSecOps team is required to identify syntax errors. Which of the following is the most relevant to the DevSecOps team's task?

Options

  • AStatic application security testing
  • BSoftware composition analysis
  • CRuntime application self-protection
  • DWeb application vulnerability scanning

How the community answered

(31 responses)
  • A
    90% (28)
  • B
    3% (1)
  • D
    6% (2)

Explanation

Static Application Security Testing (SAST) analyzes source code, bytecode, or binaries without executing the program, making it highly relevant for identifying syntax errors during the development process. This approach is ideal for the DevSecOps team's task of identifying errors before deployment.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice