CAS-005 · Question #249
As part of a security audit in the software development life cycle, a product manager must demonstrate and provide evidence of a complete representation of the code and modules used within the…
The correct answer is A. Software composition analysis. Software Composition Analysis (SCA) is the best method for identifying all components, dependencies, and open-source libraries used in an application. It ensures that organizations track and manage vulnerabilities in third-party code before deployment. SCA tools generate a…
Question
As part of a security audit in the software development life cycle, a product manager must demonstrate and provide evidence of a complete representation of the code and modules used within the production-deployed application prior to the build. Which of the following best provides the required evidence?
Options
- ASoftware composition analysis
- BRuntime application inspection
- CStatic application security testing
- DInteractive application security testing
How the community answered
(20 responses)- A90% (18)
- B5% (1)
- C5% (1)
Explanation
Software Composition Analysis (SCA) is the best method for identifying all components, dependencies, and open-source libraries used in an application. It ensures that organizations track and manage vulnerabilities in third-party code before deployment. SCA tools generate a Software Bill of Materials (SBOM), which provides a full representation of the code and modules used in the application.
Community Discussion
No community discussion yet for this question.