nerdexam
CompTIA

CAS-005 · Question #405

A company needs to define a new road map for improving secure coding practices in the software development life cycle and implementing better security standards. Which of the following is the best…

The correct answer is A. Performing a Software Assurance Maturity Model assessment and generating a road map as a. Performing a Software Assurance Maturity Model (SAMM) assessment provides a structured way to evaluate current secure software practices and generate a tailored improvement road map. It aligns well with the goal of enhancing secure coding practices and implementing better…

Submitted by luis.pe· Mar 6, 2026Security Engineering

Question

A company needs to define a new road map for improving secure coding practices in the software development life cycle and implementing better security standards. Which of the following is the best way for the company to achieve this goal?

Options

  • APerforming a Software Assurance Maturity Model assessment and generating a road map as a
  • BConducting a threat-modeling exercise for the main applications and developing a road map
  • CDeveloping a new road map, including secure coding best practices, based on the security area
  • DUsing the best practices in the OWASP secure coding manual to define a new road map

How the community answered

(33 responses)
  • A
    85% (28)
  • B
    6% (2)
  • C
    3% (1)
  • D
    6% (2)

Explanation

Performing a Software Assurance Maturity Model (SAMM) assessment provides a structured way to evaluate current secure software practices and generate a tailored improvement road map. It aligns well with the goal of enhancing secure coding practices and implementing better security standards across the SDLC.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice